Lucene search
Dev6968AFC8981-BAFF-4082-B640-BE535B29EB9AHistoryDec 10, 2021 - 7:05 p.m.
Business Logic Errors in yetiforcecompany/yetiforcecrm
2021-12-1019:05:40
dev696
www.huntr.dev
13
business logic errors
application security
proof of concept
bug bounty
EPSS
0.001
Percentile
21.0%
Description
The application is vulnerable to Business Logic error through negative product amount.
Proof of Concept
Step 1: Login into the application https://gitstable.yetiforce.com/index.php
Step 2: Navigate to Database -> Product -> Edit any product.
Step 3: Now enter a negative amount in Unit Price field and click on save. Here a product is added with a negative amount.
Related
osv
osv
YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number
2021-12-16 21:01:15
CVE-2021-4111
2021-12-15 09:15:06
cve
cve
CVE-2021-4111
2021-12-15 09:15:06
nvd
nvd
CVE-2021-4111
2021-12-15 09:15:06
cvelist
cvelist
CVE-2021-4111 Business Logic Errors in yetiforcecompany/yetiforcecrm
2021-12-15 08:55:11
veracode
veracode
Denial Of Service (DoS)
2021-12-16 05:55:46
prion
prion
Code injection
2021-12-15 09:15:00
github
github