CVE-2000-0922: Bytes Interactive Web Shopper

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.

Affected products

• Bytes Interactive Web Shopper: version 1.0 only; version 2.0 only

Published 2000-12-19. Last modified 2026-09-23.