CVE-2000-0254

dansie shopping cart - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0254. PoCs published by tombow & Randy Janinda.

AI-analyzed exploit summary This is a writeup describing multiple information disclosure and manipulation vulnerabilities in Dansie Shopping Cart. It details how to retrieve configuration settings, environment variables, and database contents, as well as how to manipulate shopping cart items via URL parameters.

Description

The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.

Exploits (1)

exploitdb WRITEUP VERIFIED
by tombow & Randy Janinda · textremotecgi
https://www.exploit-db.com/exploits/19852

This is a writeup describing multiple information disclosure and manipulation vulnerabilities in Dansie Shopping Cart. It details how to retrieve configuration settings, environment variables, and database contents, as well as how to manipulate shopping cart items via URL parameters.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Dansie Shopping Cart
No auth needed
Prerequisites: Network access to the target web server
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1115
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/4954

Scores

EPSS 0.0602
EPSS Percentile 92.6%

Details

Status published
Products (1)
craig_dansie/dansie_shopping_cart 3.0.4
Published Apr 14, 2000
Tracked Since Feb 18, 2026