Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-6279

Overview

Vulnerability Score 7.8 7.8
CVE Id CVE-2008-6279
Last Modified 26 Feb 2009 12:00:00
Published 25 Feb 2009 06:30:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-6279

Summary

RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.

Vulnerable Systems

Application

  • Rakhisoftware Shopping Cart -


References

BID - 32563

SECUNIA - 32950

MISC - http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt

OSVDB - 50325


Last Updated: 27 May 2016 10:49:08