CVEvulnerability
CVE-2004-0351
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-11-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.
Affected configurations
• spidersales spidersales 2.0
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html lists.grok.org.uk
- http://marc.info/?l=bugtraq&m=107833097705486&w=2 marc.info
- http://www.securityfocus.com/bid/9799 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15370 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html lists.grok.org.uk
- http://marc.info/?l=bugtraq&m=107833097705486&w=2 marc.info
- http://www.securityfocus.com/bid/9799 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15370 exchange.xforce.ibmcloud.com