CVE-2008-6279

no score yetEPSS 2.5%

rakhisoftware rakhisoftware shopping cart: no CVSS score yet. EPSS 2.5% chance of exploitation in the next 30 days.

RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2009-02-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

rakhisoftware:rakhisoftware_shopping_cart

References

http://osvdb.org/50325
http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt
http://secunia.com/advisories/32950
http://www.securityfocus.com/bid/32563
http://osvdb.org/50325

Check your stack JSON