← back
CVE-2005-0229

CVE-2005-0229

EPSS 7.7%
CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/25072unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=full-disclosure&m=110824766519417&w=2http://securitytracker.com/id?1013040https://exchange.xforce.ibmcloud.com/vulnerabilities/19145http://www.citrusdb.org/forums/viewtopic.php?t=49http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txthttp://www.securityfocus.com/bid/12402