471 matches found
CVE-2022-0746: Undefined Security Weakness
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
Business Logic Errors
Description Product status of product is unpublished has been deleted by admin in Trash folder but user can still add to cart and make purchases Proof of Concept Step 1: Admin go to Shop Products: Unpublish product and Delete product Step 2: User add product to cart by request POST...
Business Logic Errors
microweber/microweber is vulnerable to business logic errors. Lack of secure validation of sessionid for usermanager in the function removeitem causes business logic errors...
CVE-2022-0688
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0688
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0688
CVE-2022-0688 affects microweber/microweber prior to 1.2.11. The Red Hat OSV/GHSA entries and related records describe a business logic/ insecure direct object reference issue in Microweber that can enable a malicious actor to manipulate cart contents (e.g., removing items) without proper authori...
CVE-2022-0688 Business Logic Errors in microweber/microweber
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0688 Business Logic Errors in microweber/microweber
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
GHSA-3P9J-442X-HJP7 Business Logic Errors in microweber
microweber prior to 1.2.11 allows multiple uses of a single-use coupon...
CVE-2022-0688: Undefined Security Weakness
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
Business Logic Errors in microweber/microweber
Description The product is vulnerable to Business Logic error through negative product amount. Proof of Concept Step 1: Login to the application, Navigate to Shops - Products - Add Product Step 2: Fill in all the required details with Pricing parameter as -100 and click on save. Here an item is...
Publify Business Logic Errors
Publify formerly known as Typo prior to version 9.2.7 is vulnerable to business logic errors...
Business Logic Errors in Publify
Publify formerly known as Typo prior to version 9.2.7 is vulnerable to business logic errors...
CVE-2022-0524
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7...
CVE-2022-0524
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7...
Code injection
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7...
CVE-2022-0524 Business Logic Errors in publify/publify
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7...
CVE-2022-0524 Business Logic Errors in publify/publify
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7...
CVE-2022-0524
CVE-2022-0524 concerns business logic errors in Publify (Typo) prior to version 9.2.7. Multiple sources confirm the issue affects the Publify repository and Rubygems packaging, with remediation to update to 9.2.7 or later. The available documents describe the vulnerability class as business logic...