{"uuid": "c2924abc-ef12-4604-b9b2-cb7ffaed807a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2004-2221", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/bsdi/softcart/mercantec_softcart.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"skape \", \"trew\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This is an exploit for an undisclosed buffer overflow\\n          in the SoftCart.exe CGI as shipped with Mercantec's shopping\\n          cart software.  It is possible to execute arbitrary code\\n          by passing a malformed CGI parameter in an HTTP GET\\n          request.  This issue is known to affect SoftCart version\\n          4.00b.\", \"disclosure_date\": \"2004-08-19\", \"fullname\": \"exploit/bsdi/softcart/mercantec_softcart\", \"is_install_path\": true, \"mod_time\": \"2025-04-18 01:31:15 +0000\", \"name\": \"Mercantec SoftCart CGI Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-restarts\"]}, \"path\": \"/modules/exploits/bsdi/softcart/mercantec_softcart.rb\", \"platform\": \"BSDi\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"bsdi/softcart/mercantec_softcart\", \"references\": [\"CVE-2004-2221\", \"OSVDB-9011\", \"BID-10926\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"BSDi/4.3 Bruteforce\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:17.973260Z"}