Cgisecurity Quickstore Shopping cart

Now i already released this on my site but i forgot to post to bugtraq somehow. Vendor was contacted and i waited awhile for a response and got none back. Upgrade to the newest version for a fix. -zenomorph ps. check bugtraq for older holes in the same product Cgi Security Advisory 1...

CVE-2000-1223

quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request...

Quikstore File Disclosure Vulnerability

...

CVE-1999-0607

quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges...

CVE-1999-0607

QuikStore shopping cart vulnerability CVE-1999-0607 affects the CGI script quikstore.cgi in QuikStore. The issue is that quikstore.cfg is stored under the web document root with insufficient access controls, allowing remote attackers to read the cleartext administrator password and gain privilege...

CVE-1999-0607

quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges...