CART32 expdate
advICE :Intrusions : 2002612

Summary

A privileged access to the cart32 server application has been seen.

Details

Cart32 is an online shopping cart system developed by McMurtrey/Whitaker & Associates. A vulnerability in the cart32.exe CGI executable could allow a remote attacker to retrieve sensitive information about the server installation, including environment settings and a list of programs in the CGI-BIN directory. A remote attacker can exploit this vulnerability by appending the string "/expdate" to a request for the cart32.exe CGI.

parametric information URL The suspicious URL. accessed Indicates whether the URL was successfully accessed. code The HTTP return code. arg The argument to the GET command (if any).

 
Version appeared: 3.5