CVE-2008-6279

RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2008-6279 has a selected CVSS score of 7.8; EIP currently links 1 catalogued exploit.

Description

RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBRakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path DisclosureExploitDB exploitby Charalambous GlafkosNot analyzed1 file
ExploitDB
PoC details

References

5