Описание
Katrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) admin/scart.mdb and possibly (2) admin/scart97.mdb.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:a.shopkart:a.shopkart:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00527
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Katrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) admin/scart.mdb and possibly (2) admin/scart97.mdb.
EPSS
Процентиль: 67%
0.00527
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other