CVE-2003-0277

Directory traversal vulnerability in normalhtml.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. dot dot sequences in the file parameter...

happymall-adv.txt

Happymall E-Commerce Directory Transversal Bug and Cross-site scripting Vendor: Happycgi.com Product: Happymall Versions: 4.3, 4.4 patched version too 'normalhtml.cgi' doesn't filter user-supplied input. The well-known directory transversal and cross-site scripting XSS vulnerabilities are present...

CVE-2003-0243

CVE-2003-0243 affects Happycgi Happymall 4.3/4.4. The normal_html.cgi and member_html.cgi scripts pass user input to shell operations without proper filtering, enabling remote arbitrary OS command execution via crafted file parameters. Impact: remote code execution with web server privileges. Exp...