CVE-2005-4787

N/A

Description

Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) admin/index.php, and (3) admin/adminindex.php, which executes the PHP phpinfo function. NOTE: The vendor has disputed this issue, saying that "Having this in the code makes it easier for us to troubleshoot when issues arise on individual carts. For someone to have a script to do this type of search would require that they know where your shop is actually located. I dont think it really can be construde [sic] as a security issue.

CVE Details

CVSS v3.1 ScoreN/A

Published12/31/2005

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

turnkey_solutions:sunshop_shopping_cart

References

http://secunia.com/advisories/17832(cve@mitre.org)

http://www.turnkeywebtools.com/forum/showpost.php?p=9874&postcount=6(cve@mitre.org)

http://www.turnkeywebtools.com/forum/showthread.php?t=2384(cve@mitre.org)

http://secunia.com/advisories/17832(af854a3a-2127-422b-91ae-364da2661108)

http://www.turnkeywebtools.com/forum/showpost.php?p=9874&postcount=6(af854a3a-2127-422b-91ae-364da2661108)

http://www.turnkeywebtools.com/forum/showthread.php?t=2384(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.