Exploitation Summary
EIP tracks 2 public exploits for CVE-2001-0821. PoCs published by Peter Helms.
AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in DCShop, a GCI-based ecommerce system. The vulnerability allows remote users to access sensitive files containing confidential order data, including credit card information and administrator credentials.
Description
The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.
Exploits (2)
This is a writeup describing an information disclosure vulnerability in DCShop, a GCI-based ecommerce system. The vulnerability allows remote users to access sensitive files containing confidential order data, including credit card information and administrator credentials.
This is a writeup describing an information disclosure vulnerability in DCShop, a CGI-based ecommerce system. The vulnerability allows unauthenticated remote users to access sensitive order data, including credit card information and administrator credentials, via a direct URL request.