PT-2000-1089 · Make A Store · Make-A-Store Orderpage

Published 2000-02-01 · Updated 2022-08-17 · CVE-2000-0101

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Make-a-Store OrderPage (affected versions not specified)

Description The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0101

Affected Products

Make-A-Store Orderpage

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0101 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0101 · Note