CVE-2005-1329

owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• Oneworldstore (Oneworldstore)

References

• http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html
• http://secunia.com/advisories/15104
• http://securitytracker.com/id?1013796
• http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon
• http://www.osvdb.org/15781
• http://www.securityfocus.com/bid/13361