Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including the price parameter. NOTE: some details are obtained from third party information.
References
Configurations
History
21 Nov 2024, 00:18
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/22286 - Vendor Advisory | |
References | () http://securityreason.com/securityalert/1717 - | |
References | () http://securitytracker.com/id?1017041 - | |
References | () http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt - Vendor Advisory | |
References | () http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001 - Vendor Advisory | |
References | () http://www.securityfocus.com/archive/1/448094/100/0/threaded - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/29420 - |
Information
Published : 2006-10-12 00:07
Updated : 2024-11-21 00:18
NVD link : CVE-2006-5246
Mitre link : CVE-2006-5246
CVE.ORG link : CVE-2006-5246
JSON object : View
Products Affected
eazy_cart
- eazy_cart
CWE