Vulnerabilities > CVE-2005-2623 - Remote Security vulnerability in Ecw-Shop 6.0.2

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
ecw-shop

Summary

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost.

Vulnerable Configurations

Part Description Count
Application
Ecw-Shop
1