Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Apr 16, 2026

CVE-2002-2303

Description

3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.

Affected products

3d3com/Shopfactory
cpe:2.3:a:3d3.com:shopfactory:5.8:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.htmlnvd
securityreason.com/securityalert/3263nvd
www.securityfocus.com/archive/1/301863nvd
www.securityfocus.com/bid/6296nvd
exchange.xforce.ibmcloud.com/vulnerabilities/10746nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000