CVE Catalog
CVE-2000-0254
MediumExploitation Probability (EPSS)
Very high risk6.02%
92th percentile - higher than 92% of all known CVEs
Summary
The dansie shopping cart application (cart.pl) allows remote attackers to access the shopping cart database and configuration information via a URL referencing the env, db, or vars form variables.
Risk Assessment
Attackers may gain access to sensitive information, potentially leading to further attacks on the system or theft of user data.
Recommendation
It is recommended to secure the application by restricting access to sensitive variables and implementing appropriate authorization mechanisms.
Original NVD description (English source)
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.