CVE-2004-1209

CVE-2004-1209 affects Verisign Payflow Link. When run with empty Accepted URL fields, it does not properly verify the data in the hidden AMOUNT field, enabling remote attackers to modify purchase prices. Documents indicate impact on integrity (partial) with network attack vector and no confidenti...

CVE-2002-2302

3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field...