CVE

Id
2659  
CVE No.
CVE-2000-1092  
Status
Candidate  
Description
loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.  
Phase
Modified (20020327-01)  
Votes
ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(4) Christey, Cole, Magdych, Wall  
Comments
Christey> This is documented in an NSFOCUS security advisory released | sometime around December 11. Also, it"s BID:2109. | Christey> BUGTRAQ:20001213 NSFOCUS SA2000-09 : AHG EZshopper Loadpage.cgi File List | http://marc.theaimsgroup.com/?l=bugtraq&m=97676270729984&w=2 | XF:ezshopper-cgi-file-disclosure | URL:http://xforce.iss.net/static/5740.php | Frech> XF:ezshopper-cgi-file-disclosure(5740) | Christey> Followup posts indicate that this problem may have been | discovered earlier than 20001213.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
10434 2659 CVE-2000-1092 BUGTRAQ:20001213 NSFOCUS SA2000-09 : AHG EZshopper Loadpage.cgi File List  View
10435 2659 CVE-2000-1092 URL:http://marc.info/?l=bugtraq&m=97676270729984&w=2  View
10436 2659 CVE-2000-1092 BID:2109  View
10437 2659 CVE-2000-1092 URL:http://www.securityfocus.com/bid/2109  View
10438 2659 CVE-2000-1092 XF:ezshopper-cgi-file-disclosure(5740)  View

Related JVN