An attacker has been successfully modifying the purchase price of items purchased at a web site