CVE-2000-0188

High

Published: 27/02/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.01%

86th percentile - higher than 86% of all known CVEs

Summary

The search.cgi CGI script in EZShopper 3.0 allows remote attackers to read arbitrary files via a '..' (dot dot) attack or execute commands via shell metacharacters.

Risk Assessment

Attackers may gain access to sensitive data or execute commands remotely, potentially leading to serious security breaches.

Recommendation

It is recommended to update EZShopper to the latest version and implement appropriate security measures to block '..' attacks and shell metacharacters.

Other vulnerabilities in EZShopper 3.0

CVE-2000-0187High
The loadpage.cgi CGI script in EZShopper 3.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.

Original NVD description (English source)

EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.