CVE-2000-0253
HighExploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
The dansie shopping cart application (cart.pl) allows remote attackers to modify sensitive purchase information via hidden form fields.
Risk Assessment
Attackers can alter transaction data, potentially leading to financial fraud and loss of customer trust.
Recommendation
It is recommended to implement input validation and protections against form manipulation.
Other vulnerabilities in dansie shopping cart application (cart.pl)
See all- CVE-2000-0254Medium
The dansie shopping cart application (cart.pl) allows remote attackers to access the shopping cart database and configuration information via a URL referencing the env, db, or vars form variables.
- CVE-2000-0252Medium
The dansie shopping cart application (cart.pl) allows remote attackers to execute commands via shell metacharacters in a form variable.
Original NVD description (English source)
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.