Lucene search
MitreCVE-2005-2217HistoryJul 12, 2005 - 4:00 a.m.
CVE-2005-2217
2005-07-1204:00:00
mitre
web.nvd.nist.gov
20
cve-2005-2217
dansie shopping cart
access control
sensitive information
remote attackers
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.009
Percentile
83.2%
Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables.
Affected configurations
Node
craig_dansiedansie_shopping_cart
| Vendor | Product | Version | CPE |
|---|---|---|---|
| craig_dansie | dansie_shopping_cart | * | cpe:2.3:a:craig_dansie:dansie_shopping_cart:*:*:*:*:*:*:*:* |
References
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.009
Percentile
83.2%
Related for CVE-2005-2217