595 matches found
Hardcoded poolFee in deposit() Function Cause Liquidity Depth Issue for Swap
Lines of code Vulnerability details Impact In deposit function we are using the hardcoded value of poolFee as 500 which limits the ability of liquidity providers to select the appropriate fee tier, potentially reducing the returns for liquidity providers. IWETHWETHADDRESS.depositvalue: msg.value;...
CVE-2023-1675
A vulnerability was found in SourceCodester School Registration and Fee System 1.0. It has been classified as critical. Affected is an unknown function of the file /bilal final/editstud.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...
CVE-2023-1674
A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issue affects some unknown processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. T...
Sql injection
A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issue affects some unknown processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. T...
CVE-2023-1675 SourceCodester School Registration and Fee System GET Parameter edit_stud.php sql injection
A vulnerability was found in SourceCodester School Registration and Fee System 1.0. It has been classified as critical. Affected is an unknown function of the file /bilal final/editstud.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...
CVE-2023-1675
The CVE-2023-1675 entry concerns SourceCodester School Registration and Fee System 1.0. It describes a SQL injection in the GET Parameter Handler, specifically the file path /bilal final/edit_stud.php where manipulating the id parameter can be exploited remotely. The vulnerability is classified a...
CVE-2023-1674
CVE-2023-1674 affects SourceCodester School Registration and Fee System 1.0. A SQL injection vulnerability exists in POST /bilal final/login.php via the username parameter, potentially allowing remote exploitation. The vulnerability is publicly disclosed and may impact confidentiality, integrity,...
CVE-2023-1674 SourceCodester School Registration and Fee System POST Parameter login.php sql injection
A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issue affects some unknown processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. T...
PT-2023-17158 · Unknown · Sourcecodester School Registration/Fee System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Registration and Fee System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /bilal final/edit stud.php of the component GET Parameter Handler. The...
School Registration and Fee System SQL注入漏洞
School Registration and Fee System is a school registration and fee system by hemedy99 individual developer. A SQL injection vulnerability exists in SourceCodester School Registration and Fee System version 1.0, which was discovered to contain a sql injection vulnerability via the parameter id...
School Registration and Fee System SQL注入漏洞
School Registration and Fee System is a school registration and fee system by hemedy99 individual developer. A SQL injection vulnerability exists in SourceCodester School Registration and Fee System version 1.0, which was discovered to contain a sql injection vulnerability via the parameter...
Upgraded Q -> 2 from #60 [1679803335439]
Judge has assessed an item in Issue 60 as 2 risk. The relevant finding follows: LiquidityPool.sol: If the fee recipient is not set then all LP operations such as deposits and withdrawals will fail. Consider making fee transfers optional depending on whether a fee recipient and percentage is set -...
set critical parameters like fee recipient in constrctor.
Lines of code Vulnerability details Impact Loss of fee at certain condition. This can happen, when user call deposit function immediately contracts are deployed. Or when admin forget to update the feeReceient address. There are lot of address that admin has to set once the contract is deployed. S...
Exchange.sol#L87 : openTrade is returning incorrect totalCost value which has accounting issue when open or closing the trade.
Lines of code Vulnerability details Impact It returns the incorrect value. Any operation done based on this function,either at front end of at contract level , could end with incorrect output. Proof of Concept User can interact with Exchangle.sol to trade. He/she will call the openTrade. openTrad...
Uneven deduction of performance fee causes some KangarooVault users to lose part of their token value
Lines of code Vulnerability details In KangarooVault.resetTrade, a performanceFee is charged upon closing of all positions, on the premiumCollected. This is inconsistent with getTokenPrice as premiumCollected is factored in the token price computation, while the performanceFee is not. This leads ...
[H-01] User that fuse more tiles to Namespace NFT pay lesser fusing costs instead of greater
Lines of code Vulnerability details Impact User that fuses more tiles will pay lesser fusing costs to revenueAddress instead of higher cost as intended Proof of Concept Namespace.solL110-L114 /Namespace.sol 110: function fuseCharacterData calldata characterList external 111: uint256 numCharacters...
Operator can cause funds to be stolen by manipulating gas fee refund
Lines of code Vulnerability details Impact An operator can manipulate the refund of gas fee mechanism to steal from the bootloader balance. Inside refundCurrentL2Transaction function in the bootloader where the refund is happening for the refund recipient at L1097, the operator provides a value f...
The price fee for fusion characters is incorrect.
Lines of code Vulnerability details Vulnerability details Price fee for fusion characters is incorrect. According to the docs Fusing To fuse a namespace NFT, the user specifies the trays and the tiles offsets within the trays to use. Note that the whole tray is always burned, even if you only use...