CVE-2004-0062: Fishnet Fishcart

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity.

Affected products

• Fishnet Fishcart: up to and including 3.1

Published 2004-02-17. Last modified 2026-06-16.