PULSE
FEED
ransommedusalocker reclama a Depransomplay reclama a Minor League Baseball · US · Hospitalityransomn0n reclama a Company #213 · QAransomn0n reclama a Company #212 · ETransomdoommageddon reclama a K**** T**** H**** B****ransomcurious worm reclama a sacheminc.com · CA · Manufacturingransomcurious worm reclama a sbhny.org · USransomcurious worm reclama a shannonhealth.com · IE · Healthcareransomcurious worm reclama a baronandbudd.com · GB · Professional Servicesransomeverstake reclama a ki*****o.comransomcurious worm reclama a raleighortho.com · US · Healthcareransomcurious worm reclama a lifelinescreening.com · US · Healthcareransomcurious worm reclama a safcodental.com · SA · Healthcareransomcurious worm reclama a marquiscompanies.com · US · Professional Servicesransommedusalocker reclama a Depransomplay reclama a Minor League Baseball · US · Hospitalityransomn0n reclama a Company #213 · QAransomn0n reclama a Company #212 · ETransomdoommageddon reclama a K**** T**** H**** B****ransomcurious worm reclama a sacheminc.com · CA · Manufacturingransomcurious worm reclama a sbhny.org · USransomcurious worm reclama a shannonhealth.com · IE · Healthcareransomcurious worm reclama a baronandbudd.com · GB · Professional Servicesransomeverstake reclama a ki*****o.comransomcurious worm reclama a raleighortho.com · US · Healthcareransomcurious worm reclama a lifelinescreening.com · US · Healthcareransomcurious worm reclama a safcodental.com · SA · Healthcareransomcurious worm reclama a marquiscompanies.com · US · Professional Services
← All CVEs
CVE WatchSep 23, 2026

CVE-2000-0921

Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a

CVSS

5.0

No CVSS

EPSS

8.1%

p95

KEV

—

Exploit Today

28

0-100

Published: Dec 19, 2000 · Last modified: Sep 23, 2026

EPSS · 30d
8.1%EPSS · 30 days8.1%
2026-10-142026-11-11
Technical description

Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.

Official references
Related CVEs

No related CVEs by CWE or product.