CVE-2007-5364

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-11 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via directory traversal sequences in the filename parameter to the createCertFingerprint function. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for payments/ideal_process.php

Affected products

Viart Shopping Cart: all versions

References

http://securityreason.com/securityalert/3212
http://www.securityfocus.com/archive/1/481658/100/0/threaded
http://www.securityfocus.com/archive/1/481848
http://www.securityfocus.com/bid/25998
http://securityreason.com/securityalert/3212
http://www.securityfocus.com/archive/1/481658/100/0/threaded
http://www.securityfocus.com/archive/1/481848
http://www.securityfocus.com/bid/25998

Get alerted when CVE-2007-5364 or the next vulnerability affects your stack