What’s Vulnerable › Vulnerabilities

CVE-2001-0821

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-12-06 · updated 2026-06-16

Description

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.

Affected products

• Dcscripts Dcshop: 1.002_beta

References

• http://archives.neohapsis.com/archives/bugtraq/2001-06/0233.html
• http://www.dcscripts.com/dcforum/dcshop/44.html
• http://www.securityfocus.com/bid/2889
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6707
• http://archives.neohapsis.com/archives/bugtraq/2001-06/0233.html
• http://www.dcscripts.com/dcforum/dcshop/44.html
• http://www.securityfocus.com/bid/2889
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6707

Get alerted when CVE-2001-0821 or the next vulnerability affects your stack