CyberShop ASP is e-commerce software that is implemented in ASP. CyberShop ASP may not adequately protect debugging scripts, this may provide for the disclosure of potentially sensitive information. It has been reported that a remote attacker may access CyberShop database debugging scripts, on a default install, without requiring prior authentication. This issue may be exploited by a malicious attacker to disclose potentially sensitive information that is contained in the database used by CyberShop ASP.
CyberShop ASP is e-commerce software that is implemented in ASP. CyberShop ASP may not adequately protect debugging scripts, this may provide for the disclosure of potentially sensitive information. It has been reported that a remote attacker may access CyberShop database debugging scripts, on a default install, without requiring prior authentication. This issue may be exploited by a malicious attacker to disclose potentially sensitive information that is contained in the database used by CyberShop ASP.