Information disclosure in Rakhisoftware Shopping Cart

CVE-2008-6279

RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.

Vulnerability class: Information Disclosure

EPSS: 0.025 (83.2th percentile) — read the EPSS interpretation.

Affected products

Rakhisoftware Rakhisoftware_shopping_cart
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, x_refsource_MISC)