CVE-2000-1001

add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.

Date published : 2001-01-22

http://marc.info/?l=bugtraq&m=97240616129614&w=2

http://www.osvdb.org/6487