VULNERABILITY INTELLIGENCE
CVE-2008-6760
CVSS score4.3 MEDIUM
EPSS probability1.74%
CISA KEVNot currently listed
Published2009-04-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cart_save.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a user_id parameter.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')