CVE-2002-2302 3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.
MediumCVSS 6.4
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3d3.com shopfactory | = 5.5 | No fix listed |
| 3d3.com shopfactory | = 5.6 | No fix listed |
| 3d3.com shopfactory | = 5.8 | No fix listed |
References
- 20021202 ShopFactory shopping cart price manipulation mailing-list
- 20030305 shopfactory shopping cart mailing-list
- 6296 vdb-entry
- www.trust-factory.com
- shopfactory-price-modification(10746) vdb-entry