PT-2001-1990 · Dcshop · Dcshop

Published 2001-11-22 · Updated 2017-12-19 · CVE-2001-0821

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DCShop version 1.002 beta

Description The default configuration of the software places sensitive files in the cgi-bin directory. This could allow remote attackers to read sensitive data via an HTTP GET request for files such as orders.txt or auth user file.txt.

Recommendations For DCShop version 1.002 beta, consider relocating sensitive files outside the cgi-bin directory or restricting access to these files to prevent unauthorized reading. As a temporary workaround, restrict access to the cgi-bin directory to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-0821

Affected Products

Dcshop

References · 7

• 🔥 http://securityfocus.com/bid/2889 · Exploit
• 🔥 https://exploit-db.com/exploits/20938 · Exploit
• 🔥 https://exploit-db.com/exploits/20939 · Exploit
• http://dcscripts.com/dcforum/dcshop/44.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0821 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-06/0233.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6707 · Note