Vendor archive

alex_heiphetz_group CVEs

Beta · best-effort

3 CVEs tagged to vendor alex_heiphetz_group — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2000-1092

Published Jan 9, 2001

loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2000-0187

Published Feb 27, 2000

EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2000-0188

Published Feb 27, 2000

EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1