CVE-2004-0293

Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. dot dot in a HTTP request to 1 gotopage.cgi or 2 genindexpage.cgi...

CVE-2004-0293

ShopCartCGI 2.3 contains a directory traversal flaw. The vulnerability affects the CGI scripts gotopage.cgi and genindexpage.cgi, permitting an unauthenticated remote attacker to read arbitrary files via a .. path in HTTP requests. Exploitation details or fixes are not provided in the connected d...