Information disclosure in Barandisolutions Shareyourcart

CVE-2012-4332

The ShareYourCart plugin 1.7.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors related to the SDK.

Vulnerability class: Information Disclosure

EPSS: 0.023 (81.7th percentile) — read the EPSS interpretation.

Affected products

Barandisolutions Shareyourcart — versions 1.7.1
Wordpress
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2012-4332?: CVE-2012-4332 is a vulnerability in Barandisolutions Shareyourcart, classified under Information Disclosure. Published 2012-08-14.
Is CVE-2012-4332 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.