3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Shopfactory | 3d3.com | 5.5 (including) | 5.5 (including) |
| Shopfactory | 3d3.com | 5.6 (including) | 5.6 (including) |
| Shopfactory | 3d3.com | 5.8 (including) | 5.8 (including) |