high7.8Public exploit code
CVE-2008-6279
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveal…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure2008-11-28 · webapps · php · Verified
Impact
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rakhisoftware | Rakhisoftware Shopping Cart | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/50325
- http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt
- http://secunia.com/advisories/32950
- http://www.securityfocus.com/bid/32563
- http://osvdb.org/50325
- http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt
- http://secunia.com/advisories/32950
- http://www.securityfocus.com/bid/32563