Back

CVE-2001-0561

Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi.

Published: Aug 14, 2001 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (2)

Vendor Product Version
drummond_miles a1stats *
drummond_miles a1stats 1.0

GitHub Security Advisory GHSA-pwqq-cjfr-9p7q

Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 12.53%

Top 4% most likely to be exploited

Threat Score 33.8 / 100

Data Sources

NVD EPSS GitHub