Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
quikstore.cfg文件泄露敏感信息漏洞
Vulnerability Description
QuikStore是一个商业性的CGI软件包，用来为Web提供一些电子商务功能。 QuikStoreq的配置文件quikstore.cfg默认权限设置不当，导致敏感信息暴露。 某些老版本的QuikStore把管理员的用户名和口令以明文的形式存放在一个叫quikstore.cfg的配置文件里，而此文件的默认访问权限是全局可读的，远程用户可以很容易访问到。这样攻击者会轻易控制软件，得到许多用户敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A