medium5.0Public exploit code
CVE-2000-0254
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that referenc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities2000-04-14 · remote · cgi · Verified
Impact
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craig Dansie | Dansie Shopping Cart | Version 3.0.4 |