Lucene search
HistoryMay 11, 2005 - 4:00 a.m.
CVE-2005-1501
information security
vulnerability
midicart
php
shopping cart
remote attack
sensitive information disclosure
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2) item_list.php, or (3) item_show.php, which reveal the path in a PHP error message.
Affected configurations
Node
midicart_softwaremidicart_php_shopping_cart
| CPE | Name | Operator | Version |
|---|---|---|---|
| midicart_software:midicart_php_shopping_cart | midicart software midicart php shopping cart | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
Related for CVE-2005-1501