| Package | Affected versions | Patched versions |
|---|---|---|
| phpcart | = 3.2= 3.4= 4.6.4 |
phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters. NOTE: it was later reported that 3.4 through 4.6.4 are also affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free