PT-2000-1121 · Atretail · Atretail

Published 2000-02-01 · Updated 2022-08-17 · CVE-2000-0135

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Retail shopping cart application (affected versions not specified)

Description The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0135

Affected Products

Atretail

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0135 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0135 · Note