## Description

EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### alex_heiphetz_group - ezshopper

Affected Versions:

- 3.0

## References

- http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html
- http://www.securityfocus.com/bid/1014
  Exploit Patch Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html
- http://www.securityfocus.com/bid/1014
  Exploit Patch Vendor Advisory

Neural Processor Active