PT-2012-5334 · Unknown · Shareyourcart

Publicado 2012-08-14 · Atualizado 2012-08-28 · CVE-2012-4332

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ShareYourCart plugin version 1.7.1

Description The issue allows remote attackers to obtain the installation path via unspecified vectors related to the SDK.

Recommendations For ShareYourCart plugin version 1.7.1, update to a version that fixes this issue, as the current version allows remote attackers to obtain sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-4332

Produtos afetados

Shareyourcart

Referências · 5

• http://secunia.com/advisories/48960 · Aviso do Fabricante
• http://securityfocus.com/bid/53241 · Nota
• http://wordpress.org/extend/plugins/shareyourcart/changelog · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4332 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4332 · Nota de Segurança