PT-2005-2574 · Codethat · Codethat Shoppingcart

Icaro + 1 · Publicado 2005-05-16 · Atualizado 2008-09-05 · CVE-2005-1595

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CodeThat ShoppingCart version 1.3.1

Description The issue allows remote attackers to obtain sensitive information via a direct request, as the config.ini file is stored under the web root.

Recommendations For CodeThat ShoppingCart version 1.3.1, consider moving the config.ini file outside of the web root directory to prevent unauthorized access.

Exploit

Correção

Identificadores relacionados

CVE-2005-1595

Produtos afetados

Codethat Shoppingcart

Referências · 6

• 🔥 http://securityfocus.com/bid/13560 · Exploit
• 🔥 http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html · Exploit
• 🔥 http://securitytracker.com/id?1013924 · Exploit
• http://secunia.com/advisories/15251 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1595 · Nota de Segurança
• http://osvdb.org/16157 · Aviso do Fabricante