Smartwin Technology CyberOffice Shopping Cart 2.0 - Price Modification

Author: Delphis Consulting
type: remote
platform: windows
port: 
date_added: 2000-10-02 
date_updated: 2012-08-04 
verified: 1 
codes: CVE-2000-0926;OSVDB-1579 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/1733/info

Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000.

The order form CyberOffice Shopping Cart utilizes can be easily modified by downloading the form locally and then resubmitting it to the target server containing the new values. Unit item prices can be modified to any arbitrary value.

<input type="hidden" name="Item" value="Specified Value">