CVE-2007-5463
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow...
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: this can be leveraged for reading certificate or key files if an installation places these files under the web document root.
Exploit likelihood
What each source reports
NVD Score used
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: this can be leveraged for reading certificate or key files if an installation places these files under the web document root.
- Record
CVE-2007-5463- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: this can be leveraged for reading certificate or key files if an installation places these files under the web document root.
- Record
CVE-2007-5463- Updated
- 2026-11-02
EUVDEUVD-2007-5438 No score
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: this can be leveraged for reading certificate or key files if an installation places these files under the web document root.
- Record
EUVD-2007-5438- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j9m-xmx2-hj4v No score
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow...
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: this can be leveraged for reading certificate or key files if an installation places these files under the web document root.
- Record
GHSA-2j9m-xmx2-hj4v- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5463 is a medium vulnerability (CVSS 5.0) in Viart Shop, published October 15, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. No source names a fixed version.
References
securityreason.com/securityalert/3233
securityfocus.com/archive/1/481978/100/0/threaded
viart.com/ideal_process_script_fix_for_release_32_and_33_beta.html
osvdb.org/40151
secunia.com/advisories/27199
exchange.xforce.ibmcloud.com/vulnerabilities/37048
nvd.nist.gov/vuln/detail/CVE-2007-5463
github.com/advisories/GHSA-2j9m-xmx2-hj4v