Description
Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity.
References
- 1008731 vdb-entry
- 20040114 FishCart Integer Overflow / Rounding Error mailing-list