CVE-2015-2184

Name of the Vulnerable Software and Affected Versions ZeusCart version 4

Description The issue allows remote attackers to obtain configuration information. This is achieved by accessing the admin/ endpoint with a getphpinfo action, which invokes the phpinfo function.

Recommendations For ZeusCart version 4, consider restricting access to the admin/ endpoint to prevent unauthorized retrieval of configuration information. As a temporary workaround, consider disabling the getphpinfo action until a patch is available.