Lucene search
+L

68 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 6:45 a.m.•19 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

7.5CVSS5.9AI score0.00631EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 3:55 p.m.•22 views

CVE-2020-27478

Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b4767986544e01b19dbf11505a7 allows a remote attacker to execute arbitrary code via a crafted script to the search bar feature...

7.1CVSS6.8AI score0.00459EPSS
SaveExploits0
NVD
NVD
•added 2024/12/27 7:15 p.m.•25 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.9CVSS0.00627EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/27 7:15 p.m.•26 views

CVE-2024-50944

Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method...

9.8CVSS0.0103EPSS
SaveExploits0References4
NVD
NVD
•added 2024/12/27 7:15 p.m.•27 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

7.5CVSS0.00631EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/27 12:00 a.m.•29 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

0.00631EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/27 12:00 a.m.•37 views

CVE-2024-50944

Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method...

0.0103EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/27 12:00 a.m.•115 views

CVE-2024-50944

The SimplCommerce e-commerce system is vulnerable to an integer overflow in its shopping cart functionality. The root cause is the lack of sufficient validation for the quantity parameter in the CartController's AddToCart method , specifically affecting the version at commit 230310c8d7a0408569b29...

9.8CVSS5.9AI score0.0103EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/12/27 12:00 a.m.•34 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

0.00627EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/27 12:00 a.m.•101 views

CVE-2024-53476

A race condition vulnerability exists in the checkout logic of SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f . This flaw allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. Due to improper...

5.9CVSS5.8AI score0.00627EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/27 12:00 a.m.•10 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

5.8AI score0.00631EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/27 12:00 a.m.•9 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.8AI score0.00627EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/27 12:00 a.m.•19 views

CVE-2024-50944

Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method...

5.9AI score0.0103EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/12/27 12:00 a.m.•18 views

CVE-2024-50944

Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method...

9.8CVSS5.9AI score0.0103EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2024/12/27 12:00 a.m.•11 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

7.5CVSS5.8AI score0.00631EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/12/27 12:00 a.m.•19 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.9CVSS5.8AI score0.00627EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•9 views

CVE-2024-53476: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.9CVSS5.8AI score0.00627EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•5 views

CVE-2024-50945: Improper Access Control

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

7.5CVSS5.9AI score0.00631EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•8 views

CVE-2024-50944: Integer Overflow or Wraparound

Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method...

9.8CVSS5.9AI score0.0103EPSS
SaveExploits0References1
Mend
Mend
•added 2024/12/27 12:00 a.m.•10 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

8.2CVSS5.8AI score0.00627EPSS
SaveExploits0References3
Rows per page
Query Builder