PT-2005-2332 · Oneworld · Oneworldstore
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
OneWorldStore (affected versions not specified)
Description:
The issue allows remote attackers to obtain sensitive information by modifying the
idOrder parameter in the "owOfflineCC.asp" file.Recommendations:
For all affected versions, avoid using the
idOrder parameter in the vulnerable "owOfflineCC.asp" file until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Oneworldstore