CVE-2000-0921: Hassan Consulting Shopping Cart

Medium severity, CVSS 5.0. EPSS: 8.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.

Affected products

• Hassan Consulting Shopping Cart: up to and including 1.18

Published 2000-12-19. Last modified 2026-09-23.