CVE-2000-0925

MEDIUM 5.0CVE-2000-0925 · Published 19/12/2000 · updated 23/09/2026

In short

CVE-2000-0925 is a MEDIUM (CVSS 5.0) vulnerability affecting cyberoffice shopping cart (smartwin technology).
Chance of exploitation in the next 30 days (EPSS): 7.9%, higher than 94.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cyberoffice shopping cart smartwin_technology	`= 2.0`	No fix yet

Description

The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.

References

archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0001.html · Exploit
marc.info
securityfocus.com/bid/1734 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/5318

More vulnerabilities in cyberoffice shopping cart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free