CVE-2004-0293

2004-03-1805:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.9%

JSON

Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a … (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi.

References

marc.info/?l=bugtraq&m=107703602707450&w=2

www.securityfocus.com/bid/9670

www.zone-h.org/en/advisories/read/id=3962/

exchange.xforce.ibmcloud.com/vulnerabilities/14982