CVE-2007-5364: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in payments/idealprocess.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via directory traversal sequences in the filename parameter to the createCertFingerprint function. NOTE: this issue is disputed ...

Viart Shopping Cart Directory Transversal Vuln

Aria-Security Team ---------------------- Viart Shopping Cart Directory Transversal Vuln Vendor: http://www.viart.com/ POC: function createCertFingerprint$filename $fp = fopen$filename, "r"; http://target/path/payments/idealprocess.php Credits Goes To Aria-Security Team Thanks To Aura Regards,...