Vendor/product archive

dcscripts / dcshop CVEs

Beta · best-effort

2 CVEs tagged to dcscripts / dcshop — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dcscripts vendor archive

CVE-2002-0492

Published Aug 12, 2002

dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2001-0821

Published Dec 6, 2001

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request f…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1