CVE-2000-0187

High

7.5/10

Summary

EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.

Access Complexity: LOW
AccessVector: NETWORK
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

References

Advisory Timeline

Published Feb 27, 2000

CVE-2000-0187

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS