CVE Catalog

CVE-2000-0252

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.21%

80th percentile - higher than 80% of all known CVEs

Summary

The dansie shopping cart application (cart.pl) allows remote attackers to execute commands via shell metacharacters in a form variable.

Risk Assessment

An attacker could gain access to the system and execute arbitrary commands, potentially leading to serious security breaches.

Recommendation

It is recommended to update the application to the latest version and implement input validation in forms.

Original NVD description (English source)

The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS