Vulnerability Details CVE-2005-1501
MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2) item_list.php, or (3) item_show.php, which reveal the path in a PHP error message.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=111533057918993&w=2
- http://www.hackgen.org/advisories/hackgen-2005-004.txt
- http://www.osvdb.org/16172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20425
- http://marc.info/?l=bugtraq&m=111533057918993&w=2
- http://www.hackgen.org/advisories/hackgen-2005-004.txt
- http://www.osvdb.org/16172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20425
Products affected by CVE-2005-1501
-
cpe:2.3:a:midicart_software:midicart_php_shopping_cart:*