CVE-2007-5364 | BDVDB-2026-26845 Detail

Description#

Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via directory traversal sequences in the filename parameter to the createCertFingerprint function. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for payments/ideal_process.php

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/3212
http://www.securityfocus.com/archive/1/481658/100/0/threaded
http://www.securityfocus.com/bid/25998
http://www.securityfocus.com/archive/1/481848

Exploit#

No public exploit known

History#

Version 12007-10-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.