Lucene search

[email protected]CVE-2000-0253

HistoryApr 11, 2000 - 4:00 a.m.

CVE-2000-0253

2000-04-1104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2000-0253

dansie shopping cart

remote attack

form fields

data modification

6.6 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.5%

JSON

The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.

CPENameOperatorVersion
craig_dansie:dansie_shopping_cartcraig dansie dansie shopping carteq3.0.4

CPE	Name	Operator	Version
craig_dansie:dansie_shopping_cart	craig dansie dansie shopping cart	eq	3.0.4

References

www.securityfocus.com/bid/1115

exchange.xforce.ibmcloud.com/vulnerabilities/4621

6.6 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.5%

JSON

Related for CVE-2000-0253

nessus1