Описание
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.
Ссылки
- Exploit
- Vendor Advisory
- Exploit
- Exploit
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:rakhisoftware:rakhisoftware_shopping_cart:-:*:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.02691
Низкий
7.8 High
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
больше 3 лет назад
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.
EPSS
Процентиль: 86%
0.02691
Низкий
7.8 High
CVSS2
Дефекты
CWE-200