CVE-2007-5364

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.38%

Published

Oct 11, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via directory traversal sequences in the filename parameter to the createCertFingerprint function. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for payments/ideal_process.php

Weaknesses (CWE)

CWE-22

Affected Products (1)

viart · shopping_cartvulnerable

References (8)

http://securityreason.com/securityalert/3212

http://www.securityfocus.com/archive/1/481658/100/0/threaded

http://www.securityfocus.com/archive/1/481848

http://www.securityfocus.com/bid/25998

http://securityreason.com/securityalert/3212

http://www.securityfocus.com/archive/1/481658/100/0/threaded

http://www.securityfocus.com/archive/1/481848

http://www.securityfocus.com/bid/25998

KEV Catalog EPSS Scores Vendors All CVEs