Code injection

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service stamp invalidation via a SOAP request with an id value for a stamp that has not yet been printed...

CVE-2007-3871

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service stamp invalidation via a SOAP request with an id value for a stamp that has not yet been printed...

CVE-2007-3871

CVE-2007-3871 concerns Stampit Web, where guessable online order ID values enable a remote attacker to trigger a denial of service by sending a SOAP request with an ID for a stamp that has not yet been printed. The underlying issue is the predictability of the ID values used in stamp purchases, l...

CVE-2007-3871

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service stamp invalidation via a SOAP request with an id value for a stamp that has not yet been printed...