The dansie shopping cart application cart.pl allows remote malicious users to modify sensitive purchase information via hidden form fields.
craig dansie dansie shopping cart 3.0.4