An attacker can change hidden fields to any dollar amount and misrepresent purchases for businesses providing products or services using the PayFlow Link system.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35213/payflow.txt
Source: https://packetstormsecurity.com/files/35213/payflow.txt.html