PULSE
FEED
ransomscarlettgroup reclama a spencers.com · US · Retail & E-Commerceransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Servicesransomscarlettgroup reclama a spencers.com · US · Retail & E-Commerceransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Services
← All CVEs
CVE WatchSep 23, 2026

CVE-2000-0925

The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permiss

CVSS

5.0

No CVSS

EPSS

7.9%

p95

KEV

—

Exploit Today

28

0-100

Published: Dec 19, 2000 · Last modified: Sep 23, 2026

EPSS · 30d
7.9%EPSS · 30 days7.9%
2026-10-022026-10-29
Technical description

The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.

Official references
Related CVEs

No related CVEs by CWE or product.