owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Oneworldstore | Oneworldstore | basic (including) | basic (including) |
| Oneworldstore | Oneworldstore | business (including) | business (including) |
| Oneworldstore | Oneworldstore | enterprise (including) | enterprise (including) |
| Oneworldstore | Oneworldstore | free (including) | free (including) |
| Oneworldstore | Oneworldstore | soho (including) | soho (including) |