CVE-2001-1344

HIGH 7.5CVE-2001-1344 · Published 12/06/2001 · updated 16/06/2026

In short

CVE-2001-1344 is a HIGH (CVSS 7.5) vulnerability affecting webstore 400 (cgicentral), webstore 400cs (cgicentral).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webstore 400 cgicentral	`= 4.14`	No fix yet
webstore 400cs cgicentral	`= 4.14`	No fix yet

Description

WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).

References

archives.neohapsis.com/archives/bugtraq/2001-06/0142.html
securityfocus.com/bid/2860 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/6685

More vulnerabilities in webstore 400

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free