CVE-2002-0439

HIGH 7.5CVE-2002-0439 · Published 26/07/2002 · updated 16/06/2026

In short

CVE-2002-0439 is a HIGH (CVSS 7.5) vulnerability affecting cauposhop (caupo.net).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cauposhop caupo.net	`≤ 1.30a`	No fix yet

Description

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

References

iss.net/security_center/static/8431.php · Patch
securityfocus.com/archive/1/261218
securityfocus.com/bid/4270 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free