FleetCart 4.1.1 - Information Disclosure Detection

Issues with information disclosure in redirect responses. Accessing the majority of the website's pages exposes sensitive data, including the "Razorpay" "razorpayKeyId". !/usr/bin/env python3 -- coding: utf-8 -- """Issues with information disclosure in redirect responses.""" from kittysploit impo...

FleetCart Information Disclosure Vulnerability

FleetCart is an e-commerce CMS from FleetCart, Inc. An information disclosure vulnerability exists in FleetCart version 4.1.1 and earlier versions, which stems from insufficient protection of sensitive information in the razorpayKeyId parameter and can be exploited by an attacker to obtain...

CVE-2024-5230 EnvaySoft FleetCart information disclosure

A vulnerability has been found in EnvaySoft FleetCart up to 4.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument razorpayKeyId leads to information disclosure. The attack can be launched remotely. It is recommended to...

CVE-2024-5230: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in EnvaySoft FleetCart up to 4.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument razorpayKeyId leads to information disclosure. The attack can be launched remotely. It is recommended to...

FleetCart information leakage vulnerability

FleetCart is an e-commerce CMS from FleetCart, Inc. An information disclosure vulnerability exists in FleetCart version 4.1.1 and earlier versions, which stems from insufficient protection of sensitive information in the razorpayKeyId parameter and can be exploited by an attacker to obtain...

PT-2024-35164

Name of the Vulnerable Software and Affected Versions EnvaySoft FleetCart versions up to 4.1.1 Description A vulnerability has been found in EnvaySoft FleetCart, allowing for information disclosure through the manipulation of the razorpayKeyId argument. The attack can be launched remotely,...