CVE-2004-0350

LOW 2.1CVE-2004-0350 · Published 23/11/2004 · updated 16/06/2026

In short

CVE-2004-0350 is a LOW (CVSS 2.1) vulnerability affecting spidersales (spidersales).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 39.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spidersales spidersales	`= 2.0`	No fix yet

Description

SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring.

References

lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
marc.info
s-quadra.com/advisories/Adv-20040303.txt
securityfocus.com/bid/9799 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/15370

More vulnerabilities in spidersales

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free