NVD

Id
57528  
Name
CVE-2007-5463  
Description
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: this can be leveraged for reading certificate or key files if an installation places these files under the web document root.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-15  
Modified Date
2008-11-15  
Seq
2007-5463  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294335 57528 CVE-2007-5463 3233  View
294336 57528 CVE-2007-5463 20071010 Regarding vulnerability in ViArt Shop  View
294337 57528 CVE-2007-5463 25998  View
294338 57528 CVE-2007-5463 http://www.viart.com/ideal_process_script_fix_for_release_32_and_33_beta.html  View
294339 57528 CVE-2007-5463 viart-idealprocess-path-disclosure(37048)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57531 JVNDB-2007-006223 ViArt Shop の iDEAL payment モジュール における証明書および鍵ファイルのパス名を取得される脆弱性 ViArt Shop の iDEAL payment モジュールの ideal_process.php は、存在しないファイルへの fopen エラーメッセージに関連する処理に不備があるため、証明書および鍵ファイルのパス名を取得される脆弱性が存在します。 CVE-2007-5463 28818 CVE-2007-5463 57528 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006223.html 2007-10-15 2012-12-20 View