CVE-2007-5364

no score yetEPSS 2.4%

Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via directory traversal sequences in the filename parameter to the createCertFingerprint function. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for payments/ideal_process.php

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2007-10-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

viart:shopping_cart

References

http://securityreason.com/securityalert/3212
http://www.securityfocus.com/archive/1/481658/100/0/threaded
http://www.securityfocus.com/archive/1/481848
http://www.securityfocus.com/bid/25998
http://securityreason.com/securityalert/3212

Check your stack JSON