Dansie shopping cart
advICE :Intrusions : 2002752

Summary

A suspicious URL has been seen allowing access to a Dansie shopping cart server.

Details

Dansie Shopping Cart is a Web-based Perl shopping cart system. The cart.pl (Perl) application in Dansie Shopping Cart 3.0.4 handles form variables insecurely. By adding form variables, such as vars, env, or db to a URL, a remote attacker can obtain database or configuration information to modify the shopping cart contents

parametric information URL The suspicious URL. accessed Indicates whether the URL was successfully accessed. code The HTTP return code. arg The argument to the GET command (if any).

 
Version appeared: 3.5