CVE-2003-1517

cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message

published October 25, 2007

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01997 · 80.4th percentile
Published
2007-10-25T19:00Z
EPSS history
Timeline
  • 25 OCT 19:00Z
    cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message
    cvelistv5