3 matches found
Code injection
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which causes the price of the item to be subtracted from the total cost...
CVE-2014-4962: Undefined Security Weakness
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which causes the price of the item to be subtracted from the total cost...
PT-2014-6232
Name of the Vulnerable Software and Affected Versions Shopizer versions 1.1.5 and earlier Description The issue allows remote attackers to manipulate the total cost of their shopping cart by entering a negative number in the productQuantity parameter. This causes the price of the item to be...