CVE-2000-0188

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html
http://www.securityfocus.com/bid/1014Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html
http://www.securityfocus.com/bid/1014Exploit, Patch, Vendor Advisory

Timeline

Published: Feb 27, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01895.0ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onr CVE-2000-01905.0AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.CVE-2000-019110.0Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.CVE-2000-01925.0The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packag CVE-2000-01937.2The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.CVE-2000-01947.2buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.CVE-2000-01957.2setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.CVE-2000-01967.5Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email messag CVE-2000-01974.6The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user CVE-2000-01985.0Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.CVE-2000-01997.2When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" o CVE-2000-02005.1Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (