Google Search: “intitle:Index.Of /” stats merchant cgi-* etc
injection33 rates this entry 6 out of 10.
Submitted: 2004-11-07 00:00:00
Added by: injection33
This search looks for indexes with the following subdirectories: stats, merchant, online-store and cgi-local or cgi-bin. These servers have a shopping cart application called softcart in their cgi-local or cgi-bin directory. Reportedly, it is possible to execute arbitrary code by passing a malformed CGI parameter in an HTTP GET request. This issue is known to affect SoftCart version 4.00b.