CVE-2001-0821

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via…

published November 22, 2001

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03873 · 90.1th percentile
Published
2001-11-22T05:00Z
EPSS history
Timeline
  • 22 NOV 05:00Z
    The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via…
    cvelistv5