CVE-2005-1595 Information

Description

CodeThat ShoppingCart 1.3.1 stores config.ini under the web root which allows remote attackers to obtain sensitive information via a direct request.

Reference

http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html http://secunia.com/advisories/15251 http://securitytracker.com/id?1013924 http://www.osvdb.org/16157 http://www.securityfocus.com/bid/13560