CVE-2000-0252
MediumExploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
The dansie shopping cart application (cart.pl) allows remote attackers to execute commands via shell metacharacters in a form variable.
Risk Assessment
An attacker could gain access to the system and execute arbitrary commands, potentially leading to serious security breaches.
Recommendation
It is recommended to update the application to the latest version and implement input validation in forms.
Other vulnerabilities in dansie shopping cart application (cart.pl)
See all- CVE-2000-0254Medium
The dansie shopping cart application (cart.pl) allows remote attackers to access the shopping cart database and configuration information via a URL referencing the env, db, or vars form variables.
- CVE-2000-0253High
The dansie shopping cart application (cart.pl) allows remote attackers to modify sensitive purchase information via hidden form fields.
Original NVD description (English source)
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS