CVE-2005-4787

N/A

Descricao

Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) admin/index.php, and (3) admin/adminindex.php, which executes the PHP phpinfo function. NOTE: The vendor has disputed this issue, saying that "Having this in the code makes it easier for us to troubleshoot when issues arise on individual carts. For someone to have a script to do this type of search would require that they know where your shop is actually located. I dont think it really can be construde [sic] as a security issue.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado12/31/2005

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

turnkey_solutions:sunshop_shopping_cart

Referencias

http://secunia.com/advisories/17832(cve@mitre.org)

http://www.turnkeywebtools.com/forum/showpost.php?p=9874&postcount=6(cve@mitre.org)

http://www.turnkeywebtools.com/forum/showthread.php?t=2384(cve@mitre.org)

http://secunia.com/advisories/17832(af854a3a-2127-422b-91ae-364da2661108)

http://www.turnkeywebtools.com/forum/showpost.php?p=9874&postcount=6(af854a3a-2127-422b-91ae-364da2661108)

http://www.turnkeywebtools.com/forum/showthread.php?t=2384(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.