Vendors / Smartwin Technology Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Smartwin Technology records in CISA KEV No Smartwin Technology vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.07011 · Published 2001-01-22 · No fix listed
Priority LOW 33
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07853 · Published 2001-01-22 · No fix listed
Open these records in search → All records by CVSS severity
0 2 2 0 0
