CVE-2000-1001: Undefined Security Weakness

add2basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable...