PT-2005-2332 · Oneworld · Oneworldstore

·

CVE-2005-1329

·

Publicado

2005-04-27

·

Atualizado

2024-02-14

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: OneWorldStore (affected versions not specified)
Description: The issue allows remote attackers to obtain sensitive information by modifying the idOrder parameter in the "owOfflineCC.asp" file.
Recommendations: For all affected versions, avoid using the idOrder parameter in the vulnerable "owOfflineCC.asp" file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2005-1329

Produtos afetados

Oneworldstore