CVE-2000-0254
MediumExploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
The dansie shopping cart application (cart.pl) allows remote attackers to access the shopping cart database and configuration information via a URL referencing the env, db, or vars form variables.
Risk Assessment
Attackers may gain access to sensitive information, potentially leading to further attacks on the system or theft of user data.
Recommendation
It is recommended to secure the application by restricting access to sensitive variables and implementing appropriate authorization mechanisms.
Other vulnerabilities in dansie shopping cart application (cart.pl)
See all- CVE-2000-0253High
The dansie shopping cart application (cart.pl) allows remote attackers to modify sensitive purchase information via hidden form fields.
- CVE-2000-0252Medium
The dansie shopping cart application (cart.pl) allows remote attackers to execute commands via shell metacharacters in a form variable.
Original NVD description (English source)
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.