add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.

Published Jan 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre