CVE-2001-0821 The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or....
MediumCVSS 5.0
EPSS 3.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dcscripts dcshop | = 1.002_beta | No fix listed |
References
- 20010618 DCShop vulnerability mailing-list vendor-advisory
- www.dcscripts.com patch vendor-advisory
- 2889 exploit patch vdb-entry vendor-advisory
- dcshop-cgi-retrieve-information(6707) vdb-entry