CVE-2007-3446 - BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allow

CVE-2007-3446

Summary

BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers to obtain login access.

References

Vulnerable Configurations

cpe:2.3:a:bugmall:shopping_cart:*:*:*:*:*:*:*:*
cpe:2.3:a:bugmall:shopping_cart:*:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	24627
exploit-db	4103
misc	http://www.h4cky0u.org/viewtopic.php?t=26834
osvdb	40152
xf	bugmallshoppingcart-default-password(35040)

Last major update

11-10-2017 - 01:32

Published

27-06-2007 - 00:30

Last modified

11-10-2017 - 01:32