CVE-2000-1092: Alex Heiphetz Group Ezshopper

Medium severity, CVSS 5.0. EPSS: 7.5% chance of exploitation in the next 30 days.

loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.

Affected products

• Alex Heiphetz Group Ezshopper: version 2.0 only; version 3.0 only

Published 2001-01-09. Last modified 2026-06-16.