medium5.0Public exploit code
CVE-2004-0293
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access2004-02-16 · webapps · cgi · Verified
- ShopCartCGI 2.3 - 'gotopage.cgi' Traversal Arbitrary File Access2004-02-16 · webapps · cgi · Verified
Impact
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shopcartcgi | Shopcartcgi | Version 2.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107703602707450&w=2
- http://www.securityfocus.com/bid/9670
- http://www.zone-h.org/en/advisories/read/id=3962/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14982
- http://marc.info/?l=bugtraq&m=107703602707450&w=2
- http://www.securityfocus.com/bid/9670
- http://www.zone-h.org/en/advisories/read/id=3962/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14982