3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.
| Software | From | Fixed in |
|---|---|---|
| 3d3.com / shopfactory | 5.8 | 5.8.x |
| 3d3.com / shopfactory | 5.5 | 5.5.x |
| 3d3.com / shopfactory | 5.6 | 5.6.x |