PT-2012-5334 · Unknown · Shareyourcart

Published 2012-08-14 · Updated 2012-08-28 · CVE-2012-4332

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ShareYourCart plugin version 1.7.1

Description The issue allows remote attackers to obtain the installation path via unspecified vectors related to the SDK.

Recommendations For ShareYourCart plugin version 1.7.1, update to a version that fixes this issue, as the current version allows remote attackers to obtain sensitive information.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2012-4332

Affected Products

Shareyourcart

References · 5

• http://secunia.com/advisories/48960 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4332 · Security Note
• http://securityfocus.com/bid/53241 · Note
• http://wordpress.org/extend/plugins/shareyourcart/changelog · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4332 · Note