Field Assessment
AI analysis pending.
CVE
CVE-2002-0409
Severity
MEDIUM
CVSS
5
EPSS
19.32%
Microsoft
Original Filing — NVD Description
orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.