VDB
GCVE-110-CERTCC-2013-583564
GCVE-110-CERTCC-2013-583564
Advisory PublishedCVSS 7.1/10
CS-Cart v3.0.4 and possibly other versions configured with PayPal Standard Payment is susceptible to a client-side attack that results in an attacker purchasing items without having to pay for them.
Risk Scores
CVSS 2.0
7.1/10
High · AV:N/AC:M/Au:N/C:N/I:C/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score4.7remediation_levelOFreport_confidenceUCenvironmental_score1.3target_distributionLenvironmental_vectorCDP:L/TD:L/CR:ND/IR:ND/AR:ND
Aliases
References
Browse GCVE Records
73,393 records in the GCVE database · Updated July 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.