CNCVE编号：CNCVE-20000921 CVE编号：CVE-2000-0921 安全级别：中 漏洞中文描述： Hassan Consulting shop.cgi的购物车程序中的目录遍历漏洞导致远程攻击者可以通过在“page”参数中使用“..”攻击来阅读任意文件。 漏洞英文描述： Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter. 漏洞参考： BUGTRAQ:20001007 Security Advisory: Hassan Consulting's shop.cgi Directory Traversal Vulnerability. | URL:http://archives.neohapsis.com/archives/bugtraq/2000-10/0115.html | BID:1777 | URL:http://www.securityfocus.com/bid/1777 | XF:hassan-s 系统类型： Win2000/NT 漏洞类型：输入有效性检查错误