CVE-2008-6759

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via a URL in the POSTDATA parameter to manualssearch.php, which reveals the installation path in an error message...

Design/Logic Flaw

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via a URL in the POSTDATA parameter to manualssearch.php, which reveals the installation path in an error message...

CVE-2008-6759

ViArt Shop (Shopping Cart) 3.5 is affected. The vulnerability arises in manuals_search.php where a URL in the POST_DATA parameter can cause an error message to disclose the installation path, enabling information disclosure. No exploit specifics are provided in the available documents. Impact is ...

CVE-2008-6757: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in manualssearch.php in ViArt Shop aka Shopping Cart 3.5 allows remote attackers to inject arbitrary web script or HTML via the manualssearch parameter...

CVE-2008-6759: Improper Link Resolution Before File Access

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via a URL in the POSTDATA parameter to manualssearch.php, which reveals the installation path in an error message...