Eazy Cart: >> Eazy Cart >> 2.01 Security Vulnerabilities
Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a customer database via a direct request for admin/config/customer.dat. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score
7.8
EPSS Score
0.004
Published
2006-10-12