CVE-2008-6279: Rakhisoftware Shopping Cart

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message.

Affected products

• Rakhisoftware Rakhisoftware Shopping Cart: affected versions not specified

Published 2009-02-25. Last modified 2026-06-16.