Filtered by vendor Smartwin Technology
Subscribe
Filtered by product Cyberoffice Shopping Cart
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2000-0926 | 1 Smartwin Technology | 1 Cyberoffice Shopping Cart | 2024-11-20 | 7.5 HIGH | N/A |
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable. | |||||
CVE-2000-0925 | 1 Smartwin Technology | 1 Cyberoffice Shopping Cart | 2024-11-20 | 5.0 MEDIUM | N/A |
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information. |