CVE-2004-0351

Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2004-11-23

Last modified

2024-08-08

Affected products

• Spidersales (Spidersales)

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
• http://marc.info/?l=bugtraq&m=107833097705486&w=2
• http://www.securityfocus.com/bid/9799
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15370