high7.5Public exploit code
CVE-2000-0187
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alex Heiphetz Group eZshopper 3.0 - Remote Command Execution2000-02-27 · remote · multiple · Verified
- Alex Heiphetz Group eZshopper - 'loadpage.cgi' Directory Traversal2004-11-25 · webapps · cgi · Verified
Impact
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alex Heiphetz Group | Ezshopper | Version 3.0 |