CVE-2002-2303: 3d3.com Shopfactory

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.

Affected products

• 3d3.com Shopfactory: version 5.8 only

Published 2002-12-31. Last modified 2026-06-16.