Vulnerabilities (CVE)

Filtered by vendor Smartwin Technology Subscribe
Filtered by product Cyberoffice Shopping Cart
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0926 1 Smartwin Technology 1 Cyberoffice Shopping Cart 2023-12-10 7.5 HIGH N/A
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
CVE-2000-0925 1 Smartwin Technology 1 Cyberoffice Shopping Cart 2023-12-10 5.0 MEDIUM N/A
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.