Lucene search
HistoryJul 12, 2005 - 4:00 a.m.
CVE-2005-2217
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.009
Percentile
83.2%
Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables.
Affected configurations
Node
craig_dansiedansie_shopping_cart
| Vendor | Product | Version | CPE |
|---|---|---|---|
| craig_dansie | dansie_shopping_cart | * | cpe:2.3:a:craig_dansie:dansie_shopping_cart:*:*:*:*:*:*:*:* |
References
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.009
Percentile
83.2%
Related for NVD:CVE-2005-2217