Beveiligingsadvies

CVE-2005-0607

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-03-01 05:00:00

Laatst bijgewerkt 2024-08-07 21:21:06

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) check_sum.php, which reveals the path in a PHP error message.

← Alle CVE's bekijken Bekijk op cve.org ↗