An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.