2005-05-16 04:00:00
mitre
PUBLISHED
CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request.