CVE-2014-4962: Medium severity shopizer vulnerability
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which causes the price of the item to be subtracted from the total cost.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4962?
CVE-2014-4962 is classified as a high severity vulnerability due to its potential impact on e-commerce transactions.
How do I fix CVE-2014-4962?
To fix CVE-2014-4962, upgrade Shopizer to version 1.1.6 or later where this vulnerability is addressed.
What systems are affected by CVE-2014-4962?
CVE-2014-4962 affects Shopizer versions 1.1.5 and earlier.
What type of attack does CVE-2014-4962 allow?
CVE-2014-4962 allows remote attackers to manipulate the shopping cart by submitting a negative quantity for products.
What is the impact of exploiting CVE-2014-4962?
Exploitation of CVE-2014-4962 can lead to financial loss for merchants by allowing customers to reduce their shopping cart total arbitrarily.