CVE-2002-2302: 3d3.com Shopfactory

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.

Affected products

• 3d3.com Shopfactory: version 5.5 only; version 5.6 only; version 5.8 only

Published 2002-12-31. Last modified 2026-06-16.