PHPCart - Input Validation

Author: Lostmon
type: webapps
platform: php
port: 
date_added: 2005-04-27 
date_updated: 2013-05-19 
verified: 1 
codes: CVE-2005-1398;OSVDB-15859 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/13406/info

PHPCart is prone to a remote input validation vulnerability. The issue exists because the software fails to sufficiently sanitize URI parameter data that is employed when computing product charges.

A remote attacker may exploit this issue to manipulate invoice and payment charges for a specific PHPCart order.

http://www.example.com/phpcart.php?action=add&id=1002&descr=Mobile%20Phone&price=0&postage=&quantity=100