Magento XXE Unserialize Arbitrary File Read

This module exploits a XXE vulnerability in Magento 2.4.7-p1 and below which allows an attacker to read any file on the system. Module Options msf use auxiliary/gather/magento/xxecve202434102 msf undefinedxxecve202434102 show actions ...actions... msf undefinedxxecve202434102 set ACTION msf...

CVE-2008-6759

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via a URL in the POSTDATA parameter to manualssearch.php, which reveals the installation path in an error message...

Design/Logic Flaw

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via a URL in the POSTDATA parameter to manualssearch.php, which reveals the installation path in an error message...

CVE-2008-6759

ViArt Shop (Shopping Cart) 3.5 is affected. The vulnerability arises in manuals_search.php where a URL in the POST_DATA parameter can cause an error message to disclose the installation path, enabling information disclosure. No exploit specifics are provided in the available documents. Impact is ...

CVE-2008-6759: Improper Link Resolution Before File Access

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via a URL in the POSTDATA parameter to manualssearch.php, which reveals the installation path in an error message...