Back to CVE Browser

CVE-2004-0350

LOW

2.1

CVSS Severity Score

EPSS Score0.1530%

EPSS Percentile39.10th

PublishedNov 23, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring.

Affected Platforms (CPE)

📦

Spidersales

Spidersales

= 2.0

References & Advisories

🔗 http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html

🔗 http://marc.info/?l=bugtraq&m=107833097705486&w=2

🔗 http://www.s-quadra.com/advisories/Adv-20040303.txt

🔗 http://www.securityfocus.com/bid/9799

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/15370

🔗 http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html

🔗 http://marc.info/?l=bugtraq&m=107833097705486&w=2

🔗 http://www.s-quadra.com/advisories/Adv-20040303.txt

Related Vulnerabilities

CVE-2004-034810.0

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...