CVE-2002-0409

published 2002-07-26

CVE-2002-0409: orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	net_framework	—	—