The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/1115 | Exploit Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/4954 |
Configurations
Information
Published : 2000-04-13 21:00
Updated : 2018-05-02 18:29
NVD link : CVE-2000-0254
Mitre link : CVE-2000-0254
JSON object : View
CWE
Products Affected
craig_dansie
- dansie_shopping_cart