NetSight
high7.5

CVE-2000-1001

add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.

Impact

add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.

Affected products

VendorProductAffected versions
Element N.VElement Instantshop
Version 1.0

References