Description
Directory traversal vulnerability in easy-scart.cgi in iShopCart allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.
References
- 1031 third-party-advisory
- iShopCart-easyscart-directory-traversal(27015) vdb-entry
- 18223 vdb-entry
- 20060531 ishopcart cgi 0day and multiple vulnerabilities mailing-list
- 20415 third-party-advisory
- ADV-2006-2108 vdb-entry