2 matches found
Transfer ETH by using transfer() may cause this transaction to fail
Lines of code Vulnerability details Impact Transfer ETH by using transfer may cause this transaction to fail. In EIP-1884: In many cases, a recipient of ether from a CALL will want to issue a LOG. The LOG operation costs 375 plus 375 per topic. If the LOG also wants to do an SLOAD, this change ma...
TinyShop修复不当再次注入(全版本)
简要描述: 在修复http://www.wooyun.org/bugs/wooyun-2014-068153漏洞时候,处理不当,治标不治本。 详细说明: public static function getIP if isset$SERVER"HTTPXFORWARDEDFOR"$ip = $SERVER"HTTPXFORWARDEDFOR"; elseif isset$SERVER"HTTPCLIENTIP" $ip = $SERVER"HTTPCLIENTIP"; elseif isset$SERVER"REMOTEADDR" $ip = $SERVER"REMOTEADDR";...