Remote Code Execution in CartMan Shopping Cart

CVE-2002-1352 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:N

Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter.

Learn more about our Web Application Penetration Testing UK.