Vulnerability Details CVE-2000-1092
loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.041
EPSS Ranking 88.1%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2000-1092
-
cpe:2.3:a:alex_heiphetz_group:ezshopper:2.0
-
cpe:2.3:a:alex_heiphetz_group:ezshopper:3.0