EDB-20387

functional

YaBB 9.11.2000 - 'search.pl' Arbitrary Command Execution

view exploit source exploit_dbverifiedtype remoteauthor rpcpublished 2000-11-07catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2000-1176US	high7.5	5.72% (93rd)	Exploit	2001-01-09
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.