cve/2005/CVE-2005-0229.md

CVE-2005-0229

Description

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.

POC

Reference

• http://marc.info/?l=full-disclosure&m=110824766519417&w=2
• http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt

Github

No PoCs found on GitHub currently.