Lucene search

MitreCVE-2002-1352

HistorySep 17, 2003 - 4:00 a.m.

CVE-2002-1352

2003-09-1704:00:00

mitre

web.nvd.nist.gov

magne knutsen

cartman

shopping cart

cartman.php

remote attackers

product prices

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

Per Magne Knutsen’s CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter.

Affected configurations

Nvd

Node

per_magne_knutsencartmanMatch1.04

VendorProductVersionCPE
per_magne_knutsencartman1.04cpe:2.3:a:per_magne_knutsen:cartman:1.04:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
per_magne_knutsen	cartman	1.04	cpe:2.3:a:per_magne_knutsen:cartman:1.04:::::::*

References

securitytracker.com/id?1005829

www.idefense.com/advisory/12.16.02c.txt

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

Related for CVE-2002-1352