CVE-2004-0260

Description

The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||.

Affected products

• cactusoft / cactushop_lite5.0 – 5.0

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=107619501815888&w=2
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/15063
• MISChttp://www.securityfocus.com/bid/9589
• MAILING_LISThttp://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016819.html