CVE-2002-1352

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securitytracker.com/id?1005829Exploit, Vendor Advisory
http://www.idefense.com/advisory/12.16.02c.txtExploit, Vendor Advisory
http://securitytracker.com/id?1005829Exploit, Vendor Advisory
http://www.idefense.com/advisory/12.16.02c.txtExploit, Vendor Advisory

Timeline

Published: Sep 17, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-13535.0LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obt CVE-2002-13545.0Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (d CVE-2002-13555.0Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (i CVE-2002-13567.5Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed pa CVE-2002-135710.0Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote a CVE-2002-135810.0Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a d CVE-2002-135910.0Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial o CVE-2002-136010.0Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a lengt CVE-2002-136110.0overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary c CVE-2002-13625.0mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator CVE-2002-13637.5Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to caus CVE-2002-13647.2Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.