CVE-2005-0409

CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card…

published February 16, 2005

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of other vulnerabilities.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05657 · 92.9th percentile
Published
2005-02-16T05:00Z
EPSS history
Timeline
  • 16 FEB 05:00Z
    CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card…
    cvelistv5