CVE-2007-5364
- State
- Published
- Severity
- Not scored
- Published
- Oct 11, 2007
- Updated
- Aug 7, 2024
- Reserved
- Oct 10, 2007
Description
Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via directory traversal sequences in the filename parameter to the createCertFingerprint function. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for payments/ideal_process.php
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 3212third-party-advisory
- 20071005 [Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULNmailing-list
- 25998vdb-entry
- 20071009 Viart Shopping Cart Directory Transversalmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.