NVD

Id
32825  
Name
CVE-2014-4962  
Description
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which causes the price of the item to be subtracted from the total cost.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-07-15  
Modified Date
2014-07-16  
Seq
2014-4962  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172429 32825 CVE-2014-4962 20140710 SEC Consult SA-20140710-0 :: Multiple critical vulnerabilities in Shopizer webshop  View
172430 32825 CVE-2014-4962 20140710 SEC Consult SA-20140710-0 :: Multiple critical vulnerabilities in Shopizer webshop  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14501 JVNDB-2014-003376 Shopizer におけるショッピングカートの総コストを減らされる脆弱性 Shopizer には、ショッピングカートの総コストを減らされる脆弱性が存在します。 CVE-2014-4962 72251 CVE-2014-4962 32825 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003376.html 2014-07-10 2014-07-17 View