VULHUB ™

ShopFactory is an e-commerce application for Microsoft Windows operating systems. It is distributed by 3D3.Com. When a user visits a site and creates a shopping cart, information on items added to the cart are stored in web cookies. The information stored in these cookies is later retrieved by ShopFactory and used to give the user the price on the item. Changing the information contained in the cookie could change variables quoted to the user by the ShopFactory site. ** It has been reported that ShopFactory 5.8 uses a form of encryption to encode values stored in cookies. However, as this encryption is performed on client-side, it is trivial to break the encryption. Thus it is still possible to manipulate the values of cookies.

ShopFactory is an e-commerce application for Microsoft Windows operating systems. It is distributed by 3D3.Com. When a user visits a site and creates a shopping cart, information on items added to the cart are stored in web cookies. The information stored in these cookies is later retrieved by ShopFactory and used to give the user the price on the item. Changing the information contained in the cookie could change variables quoted to the user by the ShopFactory site. ** It has been reported that ShopFactory 5.8 uses a form of encryption to encode values stored in cookies. However, as this encryption is performed on client-side, it is trivial to break the encryption. Thus it is still possible to manipulate the values of cookies.