CVE-2004-0682: Comersus Open Technologies Comersus Cart

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.

Affected products

• Comersus Open Technologies Comersus Cart: version 5.0.9 only

Published 2004-08-06. Last modified 2026-06-16.