Skip to main content

CVE-2000-1001

High
7.5/10

Summary

add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.

  • LOW
  • NETWORK
  • NONE
  • PARTIAL
  • PARTIAL
  • PARTIAL

References

Advisory Timeline

  • Published