3d3.com

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

3d3.com records in CISA KEV

No 3d3.com vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Shopfactory 2 records LOW

Records

2 records in Shopfactory · all components

TI-2002-02215 CVE-2002-2303 · GHSA-4jjv-8vv6-97v7

3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price…

LOW 36

3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the da…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01027 Published 2007-10-18 No fix listed CWE-310

TI-2002-02214 CVE-2002-2302 · GHSA-27c8-ff82-g5pf

3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their…

LOW 31

3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01222 Published 2007-10-18 No fix listed CWE-264

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0