Back to Database
Status published
Medium
CVE-2008-6760
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to...
Vulnerability Description
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cart_save.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a user_id parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6760
Credits & Attribution
No credits recorded in the NVD database.
References
More from viart
View All →CVE-2009-4548
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow...
Medium
4.3
CVE-2009-4547
Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow...
Medium
4.3
CVE-2008-6766
cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote...
Medium
5
CVE-2008-6765
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to...
Medium
5
CVE-2008-6759
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to...
Medium
4.3
Affected Vendor
viart
View all reports →Affected Software
viart shop
Vulnerable Versions:
3.5
Timeline
Official Publish:
April 28th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.