The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2001-11-22T05:00:00

Updated: 2024-08-08T04:37:06.235Z

Reserved: 2001-11-22T00:00:00

Link: CVE-2001-0821

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2001-12-06T05:00:00.000

Modified: 2024-11-20T23:36:13.020

Link: CVE-2001-0821

cve-icon Redhat

No data.