CVE-2002-0409: Microsoft .NET Framework

Medium severity, CVSS 5.0. EPSS: 28.1% chance of exploitation in the next 30 days.

orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.

Affected products

• Microsoft .NET Framework: version 1.0 only

Published 2002-07-26. Last modified 2026-06-16.