← Back

Cookie Cart

cookie_cart

Vendor: Metro Marketing • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-1733
1Metro Marketing
1Cookie Cart
Apr 16, 2026
May 24, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt.
CVE-2005-1732
1Metro Marketing
1Cookie Cart
Apr 16, 2026
May 24, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi.