Vulnerability in Shopizer

CVE-2014-4962

Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which causes the price of the item to be subtracted from the total cost.

EPSS: 0.047 (90.9th percentile) — read the EPSS interpretation.

Affected products

Shopizer
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)