Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Smartwin Technology Subscribe
Filtered by product Cyberoffice Shopping Cart
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0925 1 Smartwin Technology 1 Cyberoffice Shopping Cart 2017-10-09 5.0 MEDIUM N/A
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
CVE-2000-0926 1 Smartwin Technology 1 Cyberoffice Shopping Cart 2017-10-09 7.5 HIGH N/A
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.