PT-2005-1110 · Unknown · Perlshop.Cgi

Publicado 2005-05-02 · Atualizado 2016-10-18 · CVE-1999-1374

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions perlshop.cgi (affected versions not specified)

Description The issue concerns the storage of sensitive customer information in directories and files under the web root by the perlshop.cgi shopping cart program. This allows remote attackers to obtain the information via an HTTP request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1374

Produtos afetados

Perlshop.Cgi

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1374 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=92523159819402&w=2 · Nota