CVE-2000-0187

This exploit leverages a directory traversal vulnerability in the `loadpage.cgi` script by injecting relative path traversal sequences (./) to access the `/etc/passwd` file. The null byte (%00) is used to terminate the string early, bypassing file extension checks.

This exploit targets a directory traversal and command injection vulnerability in EZShopper's loadpage.cgi and search.cgi scripts. It leverages unchecked user input to execute arbitrary commands via pipe characters in the 'file', 'template', or 'database' parameters.