CVE-2024-45300 Bypassing promo code limitations with race conditions

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...

CVE-2024-45300 Bypassing promo code limitations with race conditions

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...

CVE-2024-45300: Concurrent Execution using Shared Resource with Improper Synchronization

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...

PT-2024-31554

Name of the Vulnerable Software and Affected Versions alf.io versions prior to 2.0-M5 Description The issue is related to a race condition in the promo code system of alf.io, an open-source ticket reservation system for events. This condition allows a user to bypass the limit on the number of pro...

Malicious code in xbox-promo-checker-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6217 Malicious code in xbox-promo-checker-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 3m-promo-link-gen (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4725 Malicious code in 3m-promo-gen-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 3m-promo-gen-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in stylelint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2322 Malicious code in eslint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

promo-zone.com.mx Improper Access Control vulnerability OBB-3858932

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

promo-service.it Improper Access Control vulnerability OBB-3843943

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

promo-gift.eu Improper Access Control vulnerability OBB-3826874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

promo-conso.net Cross Site Scripting vulnerability OBB-3705770

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-3969

A vulnerability, which was classified as problematic, has been found in GZ Scripts Availability Booking Calendar PHP 1.0. Affected by this issue is some unknown functionality of the file index.php of the component HTTP POST Request Handler. The manipulation of the argument promocode leads to cros...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in GZ Scripts Availability Booking Calendar PHP 1.0. Affected by this issue is some unknown functionality of the file index.php of the component HTTP POST Request Handler. The manipulation of the argument promocode leads to cros...

PT-2023-27073 · Unknown · Gz Scripts Availability Booking Calendar Php

Name of the Vulnerable Software and Affected Versions: GZ Scripts Availability Booking Calendar PHP version 1.0 Description: A problematic issue has been found in the HTTP POST Request Handler component of the file index.php, where the manipulation of the promo code argument leads to cross site...

Availability Booking Calendar PHP 跨站脚本漏洞

Availability Booking Calendar PHP is GZ Scripts open source an availability booking calendar system . Availability Booking Calendar PHP v1.0 version of a cross-site scripting vulnerability , the vulnerability stems from the file index.php parameter promocode on the user-supplied data lack of...