high7.5Public exploit code
CVE-2003-0586
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eStore 1.0.1/1.0.2 - 'Settings.inc.php' Full Path Disclosure2003-07-17 · webapps · php · Verified
Impact
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Brooky | Estore | Version 1.0.2b |