CVE-2005-4787

N/A

Beschreibung

Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) admin/index.php, and (3) admin/adminindex.php, which executes the PHP phpinfo function. NOTE: The vendor has disputed this issue, saying that "Having this in the code makes it easier for us to troubleshoot when issues arise on individual carts. For someone to have a script to do this type of search would require that they know where your shop is actually located. I dont think it really can be construde [sic] as a security issue.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht12/31/2005

Zuletzt geandert4/16/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

turnkey_solutions:sunshop_shopping_cart

Referenzen

http://secunia.com/advisories/17832(cve@mitre.org)

http://www.turnkeywebtools.com/forum/showpost.php?p=9874&postcount=6(cve@mitre.org)

http://www.turnkeywebtools.com/forum/showthread.php?t=2384(cve@mitre.org)

http://secunia.com/advisories/17832(af854a3a-2127-422b-91ae-364da2661108)

http://www.turnkeywebtools.com/forum/showpost.php?p=9874&postcount=6(af854a3a-2127-422b-91ae-364da2661108)

http://www.turnkeywebtools.com/forum/showthread.php?t=2384(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.