Vulnerability Details CVE-2006-5246
Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including the price parameter. NOTE: some details are obtained from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/22286
- http://securityreason.com/securityalert/1717
- http://securitytracker.com/id?1017041
- http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt
- http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001
- http://www.securityfocus.com/archive/1/448094/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29420
- http://secunia.com/advisories/22286
- http://securityreason.com/securityalert/1717
- http://securitytracker.com/id?1017041
- http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt
- http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001
- http://www.securityfocus.com/archive/1/448094/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29420