CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2007-4655
https://notcve.org/view.php?id=CVE-2007-4655
Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi. Múltiples vulnerabilidades de escalado de directorio en el CGI RESCUE Shopping Basket Professional 7.51 y versiones anteriores permiten a atacantes remotos listar directorios de su elección y, posiblemente, leer directorios de su elección, a través de secuencias de escalado de directorios en parámetros sin especificar a (1) list.cgi o (2) list2.cgi. • http://jvn.jp/jp/JVN%2320452446/index.html http://osvdb.org/40146 http://osvdb.org/40147 http://secunia.com/advisories/26614 http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803 http://www.securityfocus.com/bid/25500 https://exchange.xforce.ibmcloud.com/vulnerabilities/36389 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2007-0565
https://notcve.org/view.php?id=CVE-2007-0565
CGI-Rescue Shopping Basket Professional 7.50 and earlier allows remote attackers to inject arbitrary operating system commands via unspecified vectors. CGI-Rescue Shopping Basket Professional versión 7.50 y anteriores, permite a atacantes remotos inyectar comandos arbitrarios de sistema operativo por medio de vectores no especificados. • http://jvn.jp/jp/JVN%2382258242/index.html http://osvdb.org/31622 http://secunia.com/advisories/23909 http://www.securityfocus.com/bid/22245 •