ByteOS Network

NVD Vulnerability Details :

CVE-2007-5463

Modified

Source-cve@mitre.org

Published At-15 Oct, 2007 | 22:17

Updated At-15 Oct, 2018 | 21:45

ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: this can be leveraged for reading certificate or key files if an installation places these files under the web document root.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

viart>>shop>>Versions up to 3.3_beta(inclusive)

cpe:2.3:a:viart:shop:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-22	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/40151	cve@mitre.org	N/A
http://secunia.com/advisories/27199	cve@mitre.org	Patch Vendor Advisory
http://securityreason.com/securityalert/3233	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/481978/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/25998	cve@mitre.org	N/A
http://www.viart.com/ideal_process_script_fix_for_release_32_and_33_beta.html	cve@mitre.org	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/37048	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History