CVE-2002-2303 3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie....
HighCVSS 7.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3d3.com shopfactory | = 5.8 | No fix listed |
References
- 20030305 shopfactory shopping cart mailing-list
- 3263 third-party-advisory
- 20021202 ShopFactory shopping cart price manipulation mailing-list
- 6296 vdb-entry
- shopfactory-price-modification(10746) vdb-entry