PT-2018-13430

Name of the Vulnerable Software and Affected Versions waimai Super Cms version 20150505 Description The issue allows attackers to modify the price of items in a cart by exploiting a logic flaw. This can be done by observing data in a packet capture and setting the item totals parameter to zero in...

Reverb.com: Items bought for free due to lacks of quantity controls

Hi, The server fails to check the quantity of the items that are going to be sell. Values = 0 are accepted as 1. PoC: Go here https://sandbox.reverb.com/fr/item/139897-fender-2-strap-leather-test-2018-leather Intercept the response after clicking "Add to cart" and put "quantity: 0" F302179 Procee...