Price modification possible in CyberOffice Shopping Cart malware

Description

It is possible to modify the unit price of items as it is submitted as a hidden field as part of the order form. By saving a copy of the order form down locally and modify the value it is possible to submit a order form with a negative price.