Description
3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.
References
- 20021202 ShopFactory shopping cart price manipulation mailing-list
- shopfactory-price-modification(10746) vdb-entry
- 20030305 shopfactory shopping cart mailing-list
- 6296 vdb-entry
- http://www.trust-factory.com/TF20021004.html