CVE-2000-0187
CVSS 2.0 Score 7.5 of 10 (high)
Details
Summary
CVE-2000-0187 is a vulnerability affecting the EZShopper 3.0 loadpage.cgi CGI script. This issue allows remote attackers to read arbitrary files or execute commands by exploiting the script's failure to properly handle ".." (dot dot) commands. The vulnerability can potentially lead to information disclosure or even system compromise. Attackers can take advantage of this weakness by manipulating the script's input to gain unauthorized access to sensitive data or execute malicious code. The vulnerability poses a significant risk for systems running this outdated version of the EZShopper application.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.