← Volver a CVEs
CVE-2002-0409
N/ADescripcion
orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado7/26/2002
Ultima modificacion4/16/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
microsoft:.net_framework
Referencias
http://marc.info/?l=bugtraq&m=101518860823788&w=2(cve@mitre.org)
http://marc.info/?l=bugtraq&m=101518860823788&w=2(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.