PT-2003-1144 · Per Magne Knutsen · Cartman

Published 2003-09-12 · Updated 2008-09-10 · CVE-2002-1352

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Per Magne Knutsen's CartMan shopping cart versions 1.04 and earlier

Description The issue allows remote attackers to modify product prices. This is achieved by changing the price parameter.

Recommendations For versions 1.04 and earlier, consider restricting access to the cartman.php file or validating and sanitizing the price parameter to prevent unauthorized modifications.

Exploit

Fix

Related Identifiers

CVE-2002-1352

Affected Products

Cartman

References · 3

• 🔥 http://idefense.com/advisory/12.16.02c.txt · Exploit
• 🔥 http://securitytracker.com/id?1005829 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1352 · Security Note