CNCVE编号:CNCVE-20010705 CVE编号:CAN-2001-0705 安全级别:中 漏洞中文描述: Arcadia Internet Store 1.0 中的tradecli.dll的目录遍历漏洞允许远程攻击者通过一个带有模板参数中“..”序列的URL请求来阅读网络服务器上的任意文件。 漏洞英文描述: Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web server via a URL with "dot dot" sequences in the template argument. 漏洞参考: Reference: BUGTRAQ:20010621 NERF Advisory #2 - 1C:Arcadia multiple vulnerablilities. Reference: URL: