Vulnerability Details CVE-2004-0351
Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.4%
CVSS Severity
CVSS v2 Score 2.1
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
- http://marc.info/?l=bugtraq&m=107833097705486&w=2
- http://www.securityfocus.com/bid/9799
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15370
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
- http://marc.info/?l=bugtraq&m=107833097705486&w=2
- http://www.securityfocus.com/bid/9799
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15370
Products affected by CVE-2004-0351
-
cpe:2.3:a:spidersales:spidersales:2.0