CVE-2004-0350

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-11-23 · updated 2026-06-16

Description

SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring.

Affected products

Spidersales: 2.0

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
http://marc.info/?l=bugtraq&m=107833097705486&w=2
http://www.s-quadra.com/advisories/Adv-20040303.txt
http://www.securityfocus.com/bid/9799
https://exchange.xforce.ibmcloud.com/vulnerabilities/15370
http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
http://marc.info/?l=bugtraq&m=107833097705486&w=2
http://www.s-quadra.com/advisories/Adv-20040303.txt
http://www.securityfocus.com/bid/9799
https://exchange.xforce.ibmcloud.com/vulnerabilities/15370

Get alerted when CVE-2004-0350 or the next vulnerability affects your stack