CVE-2000-0254: Craig Dansie Dansie Shopping Cart

Medium severity, CVSS 5.0. EPSS: 6% chance of exploitation in the next 30 days.

The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.

Affected products

Published 2000-04-14. Last modified 2026-06-16.