ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost.
References
Configurations
Information
Published : 2005-08-18 21:00
Updated : 2016-10-17 20:29
NVD link : CVE-2005-2623
Mitre link : CVE-2005-2623
JSON object : View
CWE
Products Affected
ecw-shop
- ecw-shop