CVE-2005-0229

Опубликовано: 27 апр. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.

Ссылки

http://marc.info/?l=full-disclosure&m=110824766519417&w=2
http://securitytracker.com/id?1013040
http://www.citrusdb.org/forums/viewtopic.php?t=49
http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/12402
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19145
http://marc.info/?l=full-disclosure&m=110824766519417&w=2
http://securitytracker.com/id?1013040
http://www.citrusdb.org/forums/viewtopic.php?t=49
http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/12402
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19145

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:citrusdb:citrusdb_customer_database:0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:citrusdb:citrusdb_customer_database:0.2:*:*:*:*:*:*:*

cpe:2.3:a:citrusdb:citrusdb_customer_database:0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3:*:*:*:*:*:*:*

cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3.1:*:*:*:*:*:*:*

cpe:2.3:a:citrusdb:citrusdb_customer_database:0.3.5:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09876

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-w7r9-gc37-g6x5

github

почти 4 года назад