Vulnerability in Craig Dansie Shopping Cart
CVE-2000-0254
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
EPSS: 0.060 (92.6th percentile) — read the EPSS interpretation.
Affected products
- Craig_dansie Dansie_shopping_cart — versions 3.0.4
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)