Directory traversal

2007-09-0422:17:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

JSON

Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi.

CPENameOperatorVersion
shopping_basket_professionalle7.51

CPE	Name	Operator	Version
	shopping_basket_professional	le	7.51

References

jvn.jp/jp/JVN%2320452446/index.html

osvdb.org/40146

osvdb.org/40147

secunia.com/advisories/26614

www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803

www.securityfocus.com/bid/25500

exchange.xforce.ibmcloud.com/vulnerabilities/36389