DC Scripts DCShop Beta 1.0 02 - File Disclosure (2)
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2001-0821 | 22 Nov 200105:00 | – | cve |
 | CVE-2001-0821 | 22 Nov 200105:00 | – | cvelist |
 | DC Scripts DCShop Beta 1.0 02 - File Disclosure (1) | 18 Jun 200100:00 | – | exploitdb |
 | EUVD-2001-0805 | 22 Nov 200105:00 | – | euvd |
 | CVE-2001-0821 | 6 Dec 200105:00 | – | nvd |
 | DCShop exposes sensitive files | 3 Nov 200500:00 | – | openvas |
source: https://www.securityfocus.com/bid/2889/info
DCShop is a GCI-based ecommerce system from DCScripts.
Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data, including credit card and other private customer information, as well as the DCShop admnistrator login ID and password.
http://theTargetHost/cgi-bin/DCShop/Auth_data/auth_user_file.txtData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Aug 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.03873