Unscored CVE-2005-2623 EUVD-2005-2624GHSA-qv44-r6cg-64h8

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which…

Published Aug 19, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost.

References

20050815 [NOBYTES.COM: #9] ECW Shop 6.0.2 - Multiple Vulnerabilities mailing-list
1014734 vdb-entry
16459 third-party-advisory