CVEvulnerability

CVE-2002-0934

6.4 MEDIUM Published 2002-10-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-10-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file.

Affected configurations

• jon hedley alienform2 1.5

Related

Referenced by CWE · observed example (2)

  • CWE-179 Incorrect Behavior Order: Early Validation weakness
  • CWE-181 Incorrect Behavior Order: Validate Before Filter weakness

References