Unscored severity · published Sep 8, 2001
CVE-2001-0985
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter
–
CVSS
3.9%
EPSS
No
On KEV
Description
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Shopping Cart · Hassan Consulting
1.23 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0985
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0985
Patch
http://www.irata.com/shopver.html
Vendor Advisory
http://www.securityfocus.com/archive/1/212827
Exploit
http://www.securityfocus.com/bid/3308
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7106
More from Shopping Cart
–
CVE-2000-0921
Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a