PT-2000-1838 · Smartwin · Smartwin Cyberoffice Shopping Cart 2

Published 2000-12-19 · Updated 2017-10-10 · CVE-2000-0926

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) (affected versions not specified)

Description The issue allows remote attackers to modify price information. This is achieved by changing the Price hidden form variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0926

Affected Products

Smartwin Cyberoffice Shopping Cart 2

References · 6

• 🔥 http://securityfocus.com/bid/1733 · Exploit
• 🔥 https://exploit-db.com/exploits/20247 · Exploit
• 🔥 http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0926 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5319 · Note
• http://marc.info/?l=bugtraq&m=97050627707128&w=2 · Note