CVE-2002-2302

Description

3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.

Affected products

• 3d3.com / shopfactory5.5 – 5.5
• 3d3.com / shopfactory5.6 – 5.6
• 3d3.com / shopfactory5.8 – 5.8

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2002-12/0018.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/10746
• MISChttp://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html
• MISChttp://www.securityfocus.com/bid/6296
• MISChttp://www.trust-factory.com/TF20021004.html