DCShop.Orders.txt

Description

It indicates a potentially malicious attempt to access orders.txt file in DC Scripts DCShop.

DCShop is a GCI-based e-commerce system from DC Scripts. There exists a vulnerability in DCShop 1.002 beta that allows remote attackers to read sensitive data via an HTTP GET request for orders.txt.

Affected Products

Any unprotected system running DCShop 1.002 beta is vulnerable.

Impact

Attackers can obtain files containing confidential order data, including credit card number and other privacy information.

Recommended Actions

Apply appropriate patches or Upgrade the system to the latest non-vulnerable version.