EZshopper- Directory Transversal (loadpage.cgi)

No description provided by source. Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.html milw0rm.com 2004-11-25...

ezshopper.txt

Product: EZshopper Versions: all URL: www.ahg.com Vulnerability: Directory Traversal Date: November 25, 2004 Discovered by: Zero X loadpage.cgi of EZshopper allows Directory Traversal Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.html - Zero X -...

[UNIX] AHG EZshopper loadpage.cgi Directory Traversal (.|./ Attack)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

EZshopper is still vulnerable against Directory Traversal.

Product: EZshopper Versions: all URL: www.ahg.com Vulnerability: Directory Traversal Date: November 25, 2004 Discovered by: Zero X [email protected] loadpage.cgi of EZshopper allows Directory Traversal Example:...

EZshopper Directory Transversal in loadpage.cgi

Exploit for cgi platform in category web applications =============================================== EZshopper Directory Transversal in loadpage.cgi =============================================== Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.ht...

EZshopper Directory Transversal in loadpage.cgi

No description provided by source. Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.html milw0rm.com 2004-11-25...

Alex Heiphetz Group eZshopper - loadpage.cgi Directory Traversal

Alex Heiphetz Group eZshopper - loadpage.cgi Directory Traversal Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.html milw0rm.com 2004-11-25...

Alex Heiphetz Group eZshopper - 'loadpage.cgi' Directory Traversal

Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.html milw0rm.com 2004-11-25...

CVE-2000-1092: Undefined Security Weakness

loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter...

CVE-2000-0187

EZShopper 3.0 contains directory traversal in loadpage.cgi (and related scripts per Nessus data) that allows remote attackers to read arbitrary files via .. traversal and may permit command execution via shell metacharacters. Affected component is EZShopper’s web CGI handling; root cause is impro...

CVE-2000-0187: Undefined Security Weakness

EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...

Alex Heiphetz Group eZshopper 3.0 - Remote Command Execution

Alex Heiphetz Group eZshopper 3.0 - Remote Command Execution source: https://www.securityfocus.com/bid/1014/info EZShopper is a perl-based E-Commerce software package offered by Alex Heiphetz Group, Inc. It is possible to remotely compromise a host due to a lack of checks on user input passed...