PT-2005-1110 · Unknown · Perlshop.Cgi

Published 2005-05-02 · Updated 2016-10-18 · CVE-1999-1374

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions perlshop.cgi (affected versions not specified)

Description The issue concerns the storage of sensitive customer information in directories and files under the web root by the perlshop.cgi shopping cart program. This allows remote attackers to obtain the information via an HTTP request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1374

Affected Products

Perlshop.Cgi

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1374 · Security Note
• http://marc.info/?l=bugtraq&m=92523159819402&w=2 · Note