Unscored CVE-2005-1733 EUVD-2005-1735GHSA-c8qq-gpgj-x8fx

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain …

Published May 24, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt.

References

1014026 vdb-entry
http://www.soulblack.com.ar/repo/papers/cookiec_advisory.txt
20050521 Cookie Cart Default Installation Multiple Vulnerabilities mailing-list