medium5.0Public exploit code
CVE-2004-0242
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Qualiteam X-Cart 3.x - Multiple Remote Information Disclosure Vulnerabilities2004-02-03 · webapps · php · Verified
Impact
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualiteam | X-Cart | Versions 3.2.0, 3.2.1, 3.3.0, 3.3.2, 3.4.0, 3.4.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107582648326448&w=2
- http://www.securityfocus.com/bid/9563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15036
- http://marc.info/?l=bugtraq&m=107582648326448&w=2
- http://www.securityfocus.com/bid/9563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15036