CVEvulnerability
CVE-2002-2303
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:C/A:N
- Weaknesses
- CWE-310
Description
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.
Affected configurations
• 3d3.com shopfactory 5.8
Related
Weakness · not in database (1)
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html cert.uni-stuttgart.de
- http://securityreason.com/securityalert/3263 securityreason.com
- http://www.securityfocus.com/archive/1/301863 www.securityfocus.com
- http://www.securityfocus.com/bid/6296 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10746 exchange.xforce.ibmcloud.com
- http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html cert.uni-stuttgart.de
- http://securityreason.com/securityalert/3263 securityreason.com
- http://www.securityfocus.com/archive/1/301863 www.securityfocus.com
- http://www.securityfocus.com/bid/6296 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10746 exchange.xforce.ibmcloud.com