medium5.0Public exploit code
CVE-2002-0492
dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DCShop Beta 1.0 - Form Manipulation2002-03-25 · webapps · cgi · Verified
Impact
dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dcscripts | Dcshop | Version 1.002_beta |