Vulnerability Details CVE-2004-0350
SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 37.9%
CVSS Severity
CVSS v2 Score 2.1
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
- http://marc.info/?l=bugtraq&m=107833097705486&w=2
- http://www.s-quadra.com/advisories/Adv-20040303.txt
- http://www.securityfocus.com/bid/9799
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15370
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
- http://marc.info/?l=bugtraq&m=107833097705486&w=2
- http://www.s-quadra.com/advisories/Adv-20040303.txt
- http://www.securityfocus.com/bid/9799
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15370
Products affected by CVE-2004-0350
-
cpe:2.3:a:spidersales:spidersales:2.0