CVE-2005-1733: Metro Marketing Cookie Cart

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt.

Affected products

Published 2005-05-24. Last modified 2026-06-16.