PT-2005-2574 · Codethat · Codethat Shoppingcart

Icaro + 1 · Published 2005-05-16 · Updated 2008-09-05 · CVE-2005-1595

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CodeThat ShoppingCart version 1.3.1

Description The issue allows remote attackers to obtain sensitive information via a direct request, as the config.ini file is stored under the web root.

Recommendations For CodeThat ShoppingCart version 1.3.1, consider moving the config.ini file outside of the web root directory to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2005-1595

Affected Products

Codethat Shoppingcart

References · 6

• 🔥 http://securityfocus.com/bid/13560 · Exploit
• 🔥 http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html · Exploit
• 🔥 http://securitytracker.com/id?1013924 · Exploit
• http://secunia.com/advisories/15251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1595 · Security Note
• http://osvdb.org/16157 · Vendor Advisory