CVE-2004-0293: Shopcartcgi

Medium severity, CVSS 5.0. EPSS: 8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi.

Affected products

• Shopcartcgi Shopcartcgi: version 2.3 only

Published 2004-11-23. Last modified 2026-06-16.