NuytsTech Security

CVE-2008-6279

by ·

RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.

Date published : 2009-02-25

http://www.securityfocus.com/bid/32563

http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt

Tags: