Lucene search
MitreCVE-2008-6279HistoryFeb 25, 2009 - 11:30 p.m.
CVE-2008-6279
2009-02-2523:30:00
CWE-200
mitre
web.nvd.nist.gov
34
cve-2008-6279
rakhisoftware
price comparison script
shopping cart
remote attackers
sensitive information
phpsessid cookie
installation path
error message
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.007
Percentile
81.2%
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.
Affected configurations
Node
rakhisoftwarerakhisoftware_shopping_cartMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| rakhisoftware | rakhisoftware_shopping_cart | - | cpe:2.3:a:rakhisoftware:rakhisoftware_shopping_cart:-:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2008-6279
2009-02-25 23:30:00
exploitdb
exploitdb
cvelist
cvelist
CVE-2008-6279
2009-02-25 23:00:00
prion
prion
Design/Logic Flaw
2009-02-25 23:30:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.007
Percentile
81.2%
Related for CVE-2008-6279