CVEvulnerability

CVE-2008-6760

4.3 MEDIUM Published 2009-04-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-59

Description

ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cart_save.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a user_id parameter.

Affected configurations

• viart viart shop 3.5

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References