Published: 03/05/2005 Updated: 19/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

phpcart.php in PHPCart 3.2 allows remote malicious users to change product price information by modifying the (1) price or (2) postage parameters. NOTE: it was later reported that 3.4 up to and including 4.6.4 are also affected.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpcart phpcart 3.2
phpcart phpcart 3.4
phpcart phpcart 4.6.4

source: wwwsecurityfocuscom/bid/13406/info PHPCart is prone to a remote input validation vulnerability The issue exists because the software fails to sufficiently sanitize URI parameter data that is employed when computing product charges A remote attacker may exploit this issue to manipulate invoice and payment charges for a specific ...

CWE-20 http://lostmon.blogspot.com/2005/04/phpcart-price-manipulation.html http://www.securityfocus.com/bid/13406 http://www.osvdb.org/15859 http://secunia.com/advisories/15147 http://www.securityfocus.com/bid/30887 https://exchange.xforce.ibmcloud.com/vulnerabilities/44766 http://www.securityfocus.com/archive/1/495806/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/25548/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-1398

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect