PT-2003-1144 · Per Magne Knutsen · Cartman

Publicado 2003-09-12 · Atualizado 2008-09-10 · CVE-2002-1352

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Per Magne Knutsen's CartMan shopping cart versions 1.04 and earlier

Description The issue allows remote attackers to modify product prices. This is achieved by changing the price parameter.

Recommendations For versions 1.04 and earlier, consider restricting access to the cartman.php file or validating and sanitizing the price parameter to prevent unauthorized modifications.

Exploit

Correção

Identificadores relacionados

CVE-2002-1352

Produtos afetados

Cartman

Referências · 3

• 🔥 http://idefense.com/advisory/12.16.02c.txt · Exploit
• 🔥 http://securitytracker.com/id?1005829 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1352 · Nota de Segurança