Manipulating the price of goods in some shopping baskets
################################################## ################################
@ @
@ :: LwB Security Team :: @
@ @
################################################## ################################
# -written By durito #
# -e-Mail: [email protected] #
# -http: //www.lwbteam.org #
# -date: 28/01/2004 #
# -comments: Information is provided for reference only and is considered #
# As a benefit for administrators. This article is not #
# A guide to action. We are not responsible for damage #
# Perfect reader of this article, and for illegal #
# Use the information provided to us #
################################################## ################################
- = Manipulation of the price of goods in some shopping carts = -
************************************************** ******
The vulnerability, which I want to tell you today, is not new, but despite this,
some new e-commerce systems that appear on the network susceptible to them.
I'll start with an old bug, which lies in the fact that the script shopping carts
It does not filter the characters number of purchased goods. A striking example of this vulnerability
It gives us a shopping trolley with http://www.memoryworld.net.
Suppose that we select from the catalog of products COMPACT FLASH CARD (3.3 / 5V) 128M
- COMPACT FLASH CARD (3.3 / 5V) 128M MEMORY CARD for $ 55.00 for 1 piece.
In our shopping trolley product is, and we can pay it. But let's say we
We decided to order myself one COMPACT FLASH CARD (3.3 / 5V) 128M - COMPACT FLASH
CARD (3.3 / 5V) 128M MEMORY CARD, only now in the window we set the number of goods
not 1 and 1. As a result, shopping carts with goods based ask us to pay
$ 55.00 - $ 55.00 = $ 0.00
Like this:
Description Quantity Price Total Price
Peripherals - COMPACT FLASH CARD (3.3 / 5V) 128M - COMPACT FLASH CARD (3.3 / 5V)
128M MEMORY CARD -1 $ 55.00 ($ 55.00)
Peripherals - COMPACT FLASH CARD (3.3 / 5V) 128M - COMPACT FLASH CARD (3.3 / 5V)
128M MEMORY CARD 1 $ 55.00 $ 55.00
Total $ 0.00
Naturally for $ 0.00 no 2 COMPACT FLASH CARD you will not send, but if you approach
the matter properly, then in principle to reduce the price of goods is real.
A second example of poorly written e-shop truck gives us a
http://ssl.adgrafix.com/cgi-bin/checkitout/checkitout.cgi?theorangSTORE:CKIE:home+
In this case, the price of goods is registered in the hidden html-code fields, and it can be changed.
That piece of code:
---------------
California Valencia Oranges
$ 29.99 New Low Price Includes Standard S & H.
name = price>
We will be shipping our CA Valencia Oranges Now through September !! Order Today !!
----------------
This is a hidden line with the price:
------
name = price>
------
it can forward to:
---
name = price>
And the transaction at this price goes.
Copyright 2002-2004 by LwB Security Team. All rights reserved.
Liked? Subscribe to RSS news!
You can also support shram.kiev.ua, click:
You can also support shram.kiev.ua, click:
Do not be amiss to your friends and find out this information, share with them the article!
- Driving all the municipal transport in Kiev Photo 2017-02-28
- How often should you have sex according to age Photo 2017-02-28
- Calendar Fishing and fish forecast Peace / predatory fish for 2017. Photo 2017-02-26
- Fishing knots how to tie a hook, preparing to fly Photo 2017-02-26
- Euthanasia Coaster, a roller coaster project intended for the death penalty Photo 2017-02-26
- WEB page may be evidence in court Photo 2017-02-26
- In this cosplay you want to play yourself Photo 2017-02-25
- Elegant collection of girls from Japan. Photo 2017-02-25
- Paste GOI (from GOI - State Optical Institute) Photo 2.24.2017
- Unnecessary things that should quickly get rid Photo 2017-02-24
- Bad daily habits, because of which there is bloating Photo 2017-02-24
- Control levers aircraft engines (ORE), you never know ... Photo 2/24/2017
- Modern Design Business Card Photo 2017-02-23
- Cats, artist Vladimir Rumyantsev Photo 2017-02-23
- Interesting facts about the film Prometheus Photo 2017-02-23
- As reported on the NASA conference? Photo 2017-02-21
- SSL certificate format, how to convert a certificate in .pem, .cer, .crt, .der, pkcs or the pfx Photo 21/02/2017
- Types of bleeding and first aid rules you need to know! Photo 2017-02-20
- Early signs of diabetes, you must not ignore! Photo 2017-02-20
- Household mistakes that kill the beauty of the interior Photo 2017-02-20
- Serebro Group in Maxim magazine, March 2017 Photo 2017-02-20
- As a matter of fact 2-3 day children see the world immediately after birth Photo 2017-02-18
- Full guide shoes for men Photo 2017-02-18
- Hijab, chador, burqa - what's the difference? Photo 2017-02-18
- Effective yoga poses for a beautiful and resilient chest Photo 2017-02-15
- How to parallel park? Photo 2017-02-15
- Vegetable oils, information about each Photo 2017-02-13
- Stereo Pictures (more than 127 pieces) + how they look Photo 2017-02-12
- What time of day is best to eat certain foods Photo 2017-02-12
- Ideas for creating clay toys from which children will be delighted Photo 2017-02-12
- Dirty tricks that are used by all controllers and slippery people, you've already caught them hooked? Photo 2017-02-11
- Driving all of Kiev municipal transport Scheme marked all bus, trolleybus and tram routes, and ... Photo 2017-02-28
- How often should you have sex according to age Many people are curious to know, engage in sex, they are too many or too ... Photo 2017-02-28
- Calendar Fishing and fish forecast Peace / predatory fish in 2017 There are certain phases of the light when you just need to be alone ... Photo 2017-02-26
- Fishing knots how to tie a hook, preparing to fly Node Type selected according to the type of fishing line (monofilament or ... Photo 2017-02-26
- Euthanasia Coaster, a roller coaster project intended for the death penalty The author acknowledges that roller coasters are not the optimal machine for ... Photo 2017-02-26
- WEB page may be evidence in court should be understood that, for example, copyright does not itself violate the existing ... Photo 2017-02-26
- In this cosplay, you will want to play basic games prototypes costume - cartoon characters, anime, video games, movies, ... Photo 2017-02-25
- Elegant collection of girls from Japan. Japanese (Jap nihondzin / nippondzin, Nihon minzoku.) - The people, the main (over 98%) ... Photo 2017-02-25
- Paste GOI (from GOI - State Optical Institute) GOI paste can be used for polishing of products from various ... Photo 2017-02-24
- Unnecessary things that should quickly get rid Read reflection, in which you will learn how to let go of ... Photo 2017-02-24
- Bad daily habits, because of which there is bloating believed that bloating - it is not a separate illness, but ... Photo 2017-02-24
- Control levers aircraft engines (ORE), you never know ... Lever Engine Control (RUD) - powertrain management body aircraft ... Photo 2017-02-24
- Modern Design Business Card tors card (card) - Traditional media contact information about a person ... Photo 2017-02-23
- Cats, artist Vladimir Rumyantsev Vladimir Rumyantsev, born in 1957, began to paint at the age of ... Photo 2017-02-23
- Interesting facts about the film Prometheus Who are we really? Where did come from and where ... Photo 2017-02-23
- As reported on the NASA conference? Open 7 exoplanet system TRAPPIST-1 red dwarf; All ... Photo 2017-02-21
- SSL certificate format, how to convert a certificate in .pem, .cer, .crt, .der, pkcs or pfx for successful installation and operation of SSL certificates across multiple platforms ... Photo 2017-02-21
- Types of bleeding and first aid rules you need to know! The need for first aid for bleeding caused by a health hazard ... Photo 2017-02-20
- Early signs of diabetes, you must not ignore! Diabetes is a very serious disease that causes a lot of dangerous ... Photo 2017-02-20
- Household mistakes that kill the beauty of the interior No matter how much fuss over design in my apartment, I do not ... Photo 2017-02-20
- Serebro Group in Maxim magazine, March 2017 Olga, Katya and Polina are eager to get married - it is ... Photo 2017-02-20
- Cats. Painter Vladimir Rumyantsev. Photo 2017-02-23
- "Prometheus" - Interesting Facts Photo 2017-02-23
- Seen Lithuanian cheerleaders? Worth seeing! 02/23/2017
- Olsen, Elizabeth / Elizabeth Olsen Photo 02.23.2017
- She sat by the window, and he went into her car ... Photo 02.23.2017
- Photo Cats, Cats, Kittens Photo 2017-02-23
- How can run Turtle Photo 2017-02-23
- Bengal Cat Talking With Kitten 23/02/2017
- National Bank has issued a new coin (Photo) Photo 02.23.2017
- Protasov Yar 30 years ago Photo 2017-02-23
- Photo Animals Photo 2017-02-23
- Translation NASA What is said at the Conference of Nasa Photo 23.02.2017
- Something about the size of Jupiter, Races "Through" Sun Photo 2017-02-22
- Central streets of Kiev will block for five days Photo 2017-02-20
- 3 Ways to Make People Vagina bottleneck and firmness Photo 2017-02-20
- Monica Bellucci Gq Magazine in Italy, February 2017 Photo 2017-02-20
- «Serebro» Group B Magazine Maxim, March 2017 Photo 2017-02-20
- What to Do If you are detained by police - Article 146 Piracy Photo 2017-02-20
- There is a new free OS Photo 2017-02-18
- Wood under the electron microscope Photo 2017-02-18
- Payment Card Market in 2016 showed significant growth Photo 2017-02-18
social
loading...
Your IP: 66.102.9.131
Your Country: United States
Your Region: California
Your City: Mountain View
Your Country: United States
Your Region: California
Your City: Mountain View