Description
CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request.
References
- 16157 vdb-entry
- 15251 third-party-advisory
- 1013924 vdb-entry
- http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html
- 13560 vdb-entry