Lucene search

MitreCVE-2002-0439

HistoryJul 26, 2002 - 4:00 a.m.

CVE-2002-0439

2002-07-2604:00:00

mitre

web.nvd.nist.gov

information security

cauposhop

xss

vulnerability

credit card theft.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.008

Percentile

82.2%

JSON

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

Affected configurations

Nvd

Node

caupo.netcauposhopRange≤1.30a

VendorProductVersionCPE
caupo.netcauposhop*cpe:2.3:a:caupo.net:cauposhop:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
caupo.net	cauposhop	*	cpe:2.3:a:caupo.net:cauposhop::::::::

References

www.iss.net/security_center/static/8431.php

www.securityfocus.com/archive/1/261218

www.securityfocus.com/bid/4270

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.008

Percentile

82.2%

JSON

Related for CVE-2002-0439