geeeekShop 1.4 – Information Disclosure

23次阅读
没有评论

geeeekShop 1.4 – Information Disclosure

漏洞ID 1054082 漏洞类型
发布时间 2003-08-09 更新时间 2003-08-09
geeeekShop 1.4 - Information DisclosureCVE编号 N/A
geeeekShop 1.4 - Information DisclosureCNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/23000
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/8380/info

geeeekShop is prone to multiple information disclosure vulnerabilities. Passing invalid data as URI parameters to geeeekShop scripts, will cause an error message to be displayed, which contains installation path information. Additionally it has been reported that a remote attacker may access site configuration scripts, which may lead to the disclosure of potentially sensitive information.

http://www.example.com/shop/?category=xxxxxx&parent=0&page=x&/'
http://www.example.com/shop/php_files/site.config.php

相关推荐: Apache AuthPG Remote SQL Query Manipulation Vulnerability

Apache AuthPG Remote SQL Query Manipulation Vulnerability 漏洞ID 1102968 漏洞类型 Input Validation Error 发布时间 2001-08-29 更新时间 2001-08-29…

正文完
 0