Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-8305
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-8305

2022-10-0316:20:37
[email protected]
web.nvd.nist.gov
22
cve-2014-8305
open redirect vulnerability
c97net cart engine
security vulnerability
phishing attack
web security

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header to (1) index.php, (2) cart.php, (3) msg.php, or (4) page.php.

Affected configurations

NVD
Node
c97cart_engineRange≤3.0
CPENameOperatorVersion
c97:cart_enginec97 cart enginele3.0

Related

prion 1
dsquare 1
cvelist 1
nvd 1
prion
prion
Open redirect
2014-10-16 19:55:00
dsquare
dsquare
Cart Engine 3.0 SQL Injection
2014-11-01 00:00:00
cvelist
cvelist
CVE-2014-8305
2022-10-03 16:20:37
nvd
nvd
CVE-2014-8305
2014-10-16 19:55:17

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON
Related for CVE-2014-8305
prion1dsquare1cvelist1nvd1