Exploit Midicart PHP - Information Disclosure

[Exploiter]

EDB-ID

21894

Проверка EDB

1. Пройдено

Автор

FROG

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2002-1798

Дата публикации

2002-10-02

source: https://www.securityfocus.com/bid/5851/info

A problem with the default installation of Midicart PHP may make it possible for remote users to gain access to sensitive information.

The default installation of Midicart PHP does not place sufficient access control on files residing in the 'admin' folder. Files in this folder are meant to be accessed by privileged individuals and may contain sensitive information.

http://<site>/admin/credit_card_info.php