7.5
CVSSv2

CVE-2004-0682

Published: 06/08/2004 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions prior to 5.098, allows remote malicious users to change the prices of items by directly modifying them in the URL.

Vulnerable Product Search on Vulmon Subscribe to Product

comersus open technologies comersus cart 5.0.9

Exploits

source: wwwsecurityfocuscom/bid/10674/info Comersus Cart is reported prone to multiple vulnerabilities These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulate parameters to change the price of an order Comersus Cart version 509 is affected by these issues, however, other versions may be prone ...