Vulnerability in Dcscripts Dcshop

CVE-2002-0492

dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

Affected products

Dcscripts Dcshop — versions 1.002_beta
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)