Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1014396 | Exploit |
Configurations
Information
Published : 2005-07-11 21:00
Updated : 2008-09-05 13:51
NVD link : CVE-2005-2217
Mitre link : CVE-2005-2217
JSON object : View
CWE
Products Affected
craig_dansie
- dansie_shopping_cart