CVE-2004-0682

comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

6.85% chance of exploitation in the next 30 days, 94th percentile

Published

2004-07-13

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24260

References

• CVE Record
• NVD entry

Related

• CVE-2004-0681
• CVE-2004-0683
• CVE-2004-0678
• CVE-2004-0691
• CVE-2004-0676
• CVE-2004-0695