PT-2000-1092 · Shoptron · Shoptron Shopping Cart Application

Published 2000-02-01 · Updated 2022-08-17 · CVE-2000-0104

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Shoptron shopping cart application (affected versions not specified)

Description The issue allows remote users to modify sensitive purchase information via hidden form fields.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0104

Affected Products

Shoptron Shopping Cart Application

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0104 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0104 · Note