CVE

Id
11435  
CVE No.
CVE-2005-0229  
Status
Candidate  
Description
CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.  
Phase
Assigned (20050205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81503 11435 CVE-2005-0229 FULLDISC:20050212 Credit Card data disclosure in CitrusDB  View
81504 11435 CVE-2005-0229 URL:http://marc.info/?l=full-disclosure&m=110824766519417&w=2  View
81505 11435 CVE-2005-0229 MISC:http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt  View
81506 11435 CVE-2005-0229 CONFIRM:http://www.citrusdb.org/forums/viewtopic.php?t=49  View
81507 11435 CVE-2005-0229 BID:12402  View
81508 11435 CVE-2005-0229 URL:http://www.securityfocus.com/bid/12402  View
81509 11435 CVE-2005-0229 SECTRACK:1013040  View
81510 11435 CVE-2005-0229 URL:http://securitytracker.com/id?1013040  View
81511 11435 CVE-2005-0229 XF:citrus-information-disclosure(19145)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61935 JVNDB-2005-000137 Mozilla 製品における javascript: または data: 形式の URI のリンクによるクロスサイトスクリプティングの脆弱性 ------------ CVE-2005-0231 11435 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000137.html  View