Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.32%
Published
Feb 17, 2004
Modified
Jun 16, 2026
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity.
Affected Products (1)
References (4)