CVE-1999-1374

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-13755.0FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name i CVE-1999-137610.0Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.CVE-1999-13775.0Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.CVE-1999-13785.0dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.CVE-1999-13795.0DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces CVE-1999-13827.2NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to ga CVE-1999-13865.5Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via CVE-1999-13934.6Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by CVE-1999-13942.1BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for file CVE-1999-13977.5Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose per CVE-1999-14002.1The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the CVE-1999-140510.0snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directo