owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.

1. 2005-04-25 First public exploit (EDB-25530)
2. 2005-04-27 Published

3.39% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-08).

• EDB-25530 OneWorldStore - IDOrder Information Disclosure webapps, 2005-04-25
• securityfocus.com http://www.securityfocus.com/bid/13361 referenced PoC, tagged "exploit" by a source, unverified
• oneworldstore.com http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon referenced PoC, tagged "exploit" by a source, unverified
• lostmon.blogspot.com http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html referenced PoC, tagged "exploit" by a source, unverified
• osvdb.org http://www.osvdb.org/15781 referenced PoC, tagged "exploit" by a source, unverified

• securitytracker.com /id?1013796

  vdb-entry, patch

• securityfocus.com /bid/13361

  vdb-entry, exploit, patch

• secunia.com /advisories/15104

  third-party-advisory, patch

• oneworldstore.com /support_security_issue_updates.asp#April_24_2005_Lostmon

  exploit, patch, url-repurposed

• lostmon.blogspot.com /2005/04/oneworldstore-user-information.html

  exploit, patch

• osvdb.org /15781

  vdb-entry, exploit

• CVE List CVE-2005-1329
• NVD CVE-2005-1329

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.