Description
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
References
- 1014 vdb-entry
- 20000227 EZ Shopper 3.0 shopping cart CGI remote command execution mailing-list