PT-2009-1795 · Cf · Cf Shopkart

Alphanix · Publicado 2009-02-27 · Atualizado 2017-09-29 · CVE-2008-6321

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: CF Shopkart version 5.2.2

Description: The issue allows remote attackers to obtain sensitive information, such as usernames and passwords, due to insufficient access control of the cfshopkart52.mdb file stored under the web root. This can be achieved via a direct request.

Recommendations: For CF Shopkart version 5.2.2, consider restricting access to the cfshopkart52.mdb file to prevent direct requests and minimize the risk of sensitive information disclosure.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-6321

Produtos afetados

Cf Shopkart

Referências · 3

• 🔥 https://exploit-db.com/exploits/7412 · Exploit
• http://secunia.com/advisories/33080 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6321 · Nota de Segurança