Shopfactory e-commerce application, which is used by over 40,000 Internet sites, allows alteration of order details. Data relational to end user input is stored in cookies, including the price of the items someone may be buying, which in turn allows them to alter the prices they pay. Versions affected: 5.8 and below.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/30871/shopfactory.txt
Source: https://packetstormsecurity.com/files/30871/shopfactory.txt.html