1. Home
  2. CVE Database
  3. CVE-2002-0439
HIGH · 7.5

CVE-2002-0439

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by i...

Vulnerability Description

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
Caupo.NetCauposhop<= 1.30a

References

FAQ

What is CVE-2002-0439?

CVE-2002-0439 is a vulnerability with a CVSS score of 7.5 (HIGH). Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by i...

How severe is CVE-2002-0439?

CVE-2002-0439 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2002-0439?

Check the references section above for vendor advisories and patch information. Affected products include: Caupo.Net Cauposhop.