CVE-2006-2823: A.shopkart

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Katrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) admin/scart.mdb and possibly (2) admin/scart97.mdb.

Affected products

• A.shopkart A.shopkart: version 2.0 only

Published 2006-06-05. Last modified 2026-06-16.