PT-2001-1990 · Dcshop · Dcshop

Publicado 2001-11-22 · Atualizado 2017-12-19 · CVE-2001-0821

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DCShop version 1.002 beta

Description The default configuration of the software places sensitive files in the cgi-bin directory. This could allow remote attackers to read sensitive data via an HTTP GET request for files such as orders.txt or auth user file.txt.

Recommendations For DCShop version 1.002 beta, consider relocating sensitive files outside the cgi-bin directory or restricting access to these files to prevent unauthorized reading. As a temporary workaround, restrict access to the cgi-bin directory to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-0821

Produtos afetados

Dcshop

Referências · 7

• 🔥 http://securityfocus.com/bid/2889 · Exploit
• 🔥 https://exploit-db.com/exploits/20938 · Exploit
• 🔥 https://exploit-db.com/exploits/20939 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6707 · Nota
• http://dcscripts.com/dcforum/dcshop/44.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0821 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2001-06/0233.html · Aviso do Fabricante