CVE-2024-5230 PoC — FleetCart 信息泄露漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5230.yaml

Associated Vulnerability

Title:FleetCart 信息泄露漏洞 (CVE-2024-5230)
Description:FleetCart是FleetCart公司的一个电子商务CMS。 FleetCart 4.1.1版本及之前版本存在信息泄露漏洞，该漏洞源于对 razorpayKeyId 参数的错误操作会导致信息泄露。

Description

Issues with information disclosure in redirect responses. Accessing the majority of the website's pages exposes sensitive data, including the "Razorpay" "razorpayKeyId".

File Snapshot


 id: CVE-2024-5230
info:
  name: FleetCart 4.1.1 - Information Disclosure
  author: s4e-io
  severity

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!