Description
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter.
References
- 20010905 ShopPlus Cart mailing-list
- shopplus-command-execution(7077) vdb-entry
Unscored
CVE-2001-0992
EUVD-2001-0974GHSA-3j3c-w28j-p83h
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" paramet…
Published Feb 2, 2002 · Updated Aug 8, 2024 · Assigned by mitre