CVE-2002-2302

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16
Weakness: CWE-264

Description

3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.

Affected products

3D3.Com Shopfactory: 5.5, 5.6, 5.8

References

http://archives.neohapsis.com/archives/bugtraq/2002-12/0018.html
http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html
http://www.securityfocus.com/bid/6296
http://www.trust-factory.com/TF20021004.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/10746
http://archives.neohapsis.com/archives/bugtraq/2002-12/0018.html
http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html
http://www.securityfocus.com/bid/6296
http://www.trust-factory.com/TF20021004.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/10746

Get alerted when CVE-2002-2302 or the next vulnerability affects your stack