Read the docs

Interspire

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

Interspire records in CISA KEV

No Interspire vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Shopping Cart · all components

Priority LOW 36

The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01548 Published 2009-02-03 No fix listed CWE-287
Open these records in search →