CVE-2004-0734

Vulnerability CVE-2004-0734 affects a CGI script named Web_Store.cgi, where remote attackers can execute arbitrary commands by supplying shell metacharacters in the page parameter. The initial sources (NVD/NVD-like entries) describe the flaw as command execution via the page parameter, with a CVS...

CVE-2000-1005

The CVE-2000-1005 entry concerns directory traversal in eXtropia WebStore CGI scripts (html_web_store.cgi and web_store.cgi). An attacker can read arbitrary files by supplying a .. (dot dot) path in the page parameter, enabling remote file disclosure. The vulnerability is evidenced by multiple so...