SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.Referenceshttp://www.securityfocus.com/bid/1733https://exchange.xforce.ibmcloud.com/vulnerabilities/5319http://marc.info/?l=bugtraq&m=97050627707128&w=2http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html
