CVE-2006-2823

CVE-2006-2823 affects a.shopKart 2.0 (aka ashopKart20). The issue is that sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the database via direct requests to admin/scart.mdb and possibly admin/scart97.mdb. The provided sources confirm the...