3D3.Com ShopFactory contains a flaw that may allow a malicious user to modify the contents of their shopping cart. The issue is triggered when a malicious user modifies variables in an existing cookie. It is possible that the flaw may allow a malicious user to specify any price desired for any items in their shopping cart while shopping, resulting in a loss of integrity.
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): set "Remember Shopping cart for (days)" to 0.