high7.5Public exploit code
CVE-2004-0682
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly m…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Comersus Open Technologies Comersus 5.0 - 'comersus_gatewayPayPal.asp' Price Manipulation2004-07-07 · webapps · asp · Verified
Impact
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comersus Open Technologies | Comersus Cart | Version 5.0.9 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108922336529987&w=2
- http://www.securityfocus.com/bid/10674
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16645
- http://marc.info/?l=bugtraq&m=108922336529987&w=2
- http://www.securityfocus.com/bid/10674
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16645