PT-2000-1123 · Cartit · Cartit

Published 2000-02-01 · Updated 2022-08-17 · CVE-2000-0137

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CartIt (affected versions not specified)

Description The issue allows remote users to modify sensitive purchase information via hidden form fields in the CartIt shopping cart application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0137

Affected Products

Cartit

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0137 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0137 · Note