Description
Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.
References
- 20040303 Spider Sales shopping cart software multiple security vulnerabilities mailing-list
- 20040303 Spider Sales shopping cart software multiple security vulnerabilities mailing-list
- spidersales-weak-encryption(15370) vdb-entry
- 9799 vdb-entry