CVE:CVE-2000-0921
CNNVD:CNNVD-200012-091
Hassan咨询的shop.cgi购物栏程序存在目录遍历漏洞。远程攻击者借助页参数的 .. (点 点)攻击读取任意文件。
solution:Upgrade hassan_consulting shopping_cart to a higher version than 1.18,and avoid the version (,1.18]