CVE:CVE-2000-1001
CNNVD:CNNVD-200012-039
Element InstantShop的add_2_basket.asp存在漏洞。远程攻击者借助“price”隐藏形式变量修改price信息。
solution:Upgrade element_n.v element_instantshop to a higher version than 1.0,and avoid the version 1.0