CVE-2001-0466

ustorekeeper 1.61 - Directory Traversal via File Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0466. PoCs published by UkR hacking team.

AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in uStorekeeper Online Shopping System, allowing remote users to access arbitrary files or execute commands via '/../' sequences in the 'file' parameter. The PoC includes examples for reading sensitive files and executing system commands.

Description

Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by UkR hacking team · textremotecgi
https://www.exploit-db.com/exploits/20725

The exploit demonstrates a directory traversal vulnerability in uStorekeeper Online Shopping System, allowing remote users to access arbitrary files or execute commands via '/../' sequences in the 'file' parameter. The PoC includes examples for reading sensitive files and executing system commands.

Classification
Working Poc 90%
Attack Type
Info Leak | Rce
Complexity
Trivial
Reliability
Reliable
Target: uStorekeeper Online Shopping System (versions unspecified)
No auth needed
Prerequisites: Target running vulnerable uStorekeeper Online Shopping System · Access to the CGI script endpoint
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=98633176230748&w=2

Scores

EPSS 0.0648
EPSS Percentile 93.1%

Details

Status published
Products (1)
microburst/ustorekeeper_online_shopping_system 1.61
Published Jun 18, 2001
Tracked Since Feb 18, 2026