Description
Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including the price parameter. NOTE: some details are obtained from third party information.
References
- 1717 third-party-advisory
- 20061010 MHL-2006-001 Public Advisory: "Eazy Cart" Multiple Security Issues mailing-list
- http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001
- 1017041 vdb-entry
- 22286 third-party-advisory
- http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt
- eazycart-easycart-data-manipulation(29420) vdb-entry