CVE-2014-4962
NONE EPSS 90.7%
Published Jul 15, 201411y ago · Modified Jun 17, 20262w ago
Published Jul 15, 2014 11y ago
Last Modified Jun 17, 2026 2w ago
Description
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which causes the price of the item to be subtracted from the total cost.
Threat Intelligence
EPSS Exploit Probability
90.7% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-189
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| shopizer | shopizer | * | ≤1.1.5 |
References 2
- seclists.org http://seclists.org/fulldisclosure/2014/Jul/38
- securityfocus.com http://www.securityfocus.com/archive/1/532726/100/0/threaded
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.