ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost.
Software | From | Fixed in |
---|---|---|
ecw-shop / ecw-shop | 6.0.2 | 6.0.2.x |