Lucene search
HistoryOct 03, 2022 - 4:13 p.m.
CVE-2008-6279
cve-2008-6279
rakhisoftware
price comparison script
shopping cart
remote attackers
sensitive information
phpsessid cookie
installation path
error message
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.9%
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.
Affected configurations
Node
rakhisoftwarerakhisoftware_shopping_cartMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| rakhisoftware:rakhisoftware_shopping_cart | rakhisoftware rakhisoftware shopping cart | eq | - |
Related
cvelist
cvelist
CVE-2008-6279
2022-10-03 16:13:48
nvd
nvd
CVE-2008-6279
2009-02-25 23:30:00
prion
prion
Design/Logic Flaw
2009-02-25 23:30:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.9%
Related for CVE-2008-6279