Vulnerability Details CVE-2002-2303
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.0%
CVSS Severity
CVSS v2 Score 7.8
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html
- http://securityreason.com/securityalert/3263
- http://www.securityfocus.com/archive/1/301863
- http://www.securityfocus.com/bid/6296
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10746
- http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html
- http://securityreason.com/securityalert/3263
- http://www.securityfocus.com/archive/1/301863
- http://www.securityfocus.com/bid/6296
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10746
Products affected by CVE-2002-2303
-
cpe:2.3:a:3d3.com:shopfactory:5.8