CVE-2000-0187

High

Published: 27/02/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

8.53%

94th percentile - higher than 94% of all known CVEs

Summary

The loadpage.cgi CGI script in EZShopper 3.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.

Risk Assessment

Attackers may gain access to sensitive data or execute commands remotely, potentially leading to serious security breaches.

Recommendation

It is recommended to update EZShopper to the latest version and implement appropriate security measures to block .. (dot dot) attacks.

Original NVD description (English source)

EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.