exploit-db-mirror/platforms/cgi/webapps/23266.txt
Offensive Security 5e2fc10125 DB: 2016-09-03
2016-09-03 13:13:25 +00:00

7 lines
No EOL
433 B
Text
Executable file

source: http://www.securityfocus.com/bid/8860/info
Dansie Shopping Cart is reported to be prone to path disclosre issue in the 'db' parameter of 'cart.pl' that may lead to an attacker gaining sensitive information about the installation path of the system.
Information gained by exploiting this attack may aid an attacker in launching further attacks against a vulnerable system.
http://www.example.com/cgi-bin/cart.pl?db='