Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2008-6279

Description

RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.

POC

Reference

- http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt

Github

No PoCs found on GitHub currently.