Price Manipulation Vulnerability in Comersus Cart 5.09 and Earlier Versions

CVE-2004-0682 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.

Learn more about our Web Application Penetration Testing UK.