Unscored CVE-2004-0240 EUVD-2004-0240GHSA-h8c5-whqm-fhgj

Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_fil…

Published Mar 18, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php.

References

xcart-dotdot-directory-traversal(15033) vdb-entry
20040203 X-Cart vulnerability mailing-list