high7.5Public exploit code
CVE-2000-0926
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification2000-10-02 · remote · windows · Verified
Impact
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartwin Technology | Cyberoffice Shopping Cart | Version 2.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html
- http://marc.info/?l=bugtraq&m=97050627707128&w=2
- http://www.securityfocus.com/bid/1733
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5319
- http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html
- http://marc.info/?l=bugtraq&m=97050627707128&w=2
- http://www.securityfocus.com/bid/1733
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5319