Lucene search

K
cveMitreCVE-2006-5246
HistoryOct 12, 2006 - 12:07 a.m.

CVE-2006-5246

2006-10-1200:07:00
mitre
web.nvd.nist.gov
21
eazy cart
remote attack
price manipulation
easycart.php
cve-2006-5246

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.048

Percentile

92.8%

Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including the price parameter. NOTE: some details are obtained from third party information.

Affected configurations

Nvd
Node
eazy_carteazy_cart
VendorProductVersionCPE
eazy_carteazy_cart*cpe:2.3:a:eazy_cart:eazy_cart:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.048

Percentile

92.8%

Related for CVE-2006-5246