CVE-2004-2172: Netsourcecommerce Productcart

High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days.

EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.

Affected products

• Netsourcecommerce Productcart: before 2.53 (fixed in 2.53)

Published 2004-12-31. Last modified 2026-06-16.