471 matches found
CVE-2022-0524: Undefined Security Weakness
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7...
Business Logic Errors in SilverStripe Framework
SilverStripe Framework prior to version 4.10.1 is vulnerable to business logic errors...
Business Logic Errors in publify/publify
Description It was found that if a user tries to create an article, and want to make that article private, the functionality is not working. Proof of Concept 1. Create an article 2. Click on publish and you will see the option to visibility to make it private, but functionality is not designed...
Business Logic Errors in dolibarr/dolibarr
Description Dolibarr is vulnerable to Business Logic Errors in the Weight, Length x Width x Height, Area, Volume fields of a Product since these values can be negative numbers. Proof of Concept 1.After login, in the top menu bar, click Products 2.In the left menu bar, click List to view the list ...
Business Logic Errors in crater-invoice/crater
Description It is found that comapny currency can not be changed since the field is disabled as shown in the screenshot but it can be changed by tampering the parameter. Proof of Concept Actual Request POST /api/v1/company/settings HTTP/1.1 Host: demo.craterapp.com User-Agent: Mozilla/5.0 Windows...
Business Logic Errors in pimcore
In pimcore versions prior to 10.2.9 discounts could be negative resulting in unintended behavior...
GHSA-54HW-MHGH-X4VC Business Logic Errors in pimcore
In pimcore versions prior to 10.2.9 discounts could be negative resulting in unintended behavior...
GHSA-XP7P-3GX7-J6WX calibre-web is vulnerable to Business Logic Errors
calibre-web is vulnerable to Business Logic Errors...
calibre-web is vulnerable to Business Logic Errors
calibre-web is vulnerable to Business Logic Errors...
CVE-2021-4146
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...
CVE-2021-4146
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...
Code injection
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...
CVE-2021-4146 Business Logic Errors in pimcore/pimcore
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...
CVE-2021-4146
CVE-2021-4146 relates to Business Logic Errors in pimcore/pimcore prior to version 10.2.6. Multiple connected advisories describe a flaw where discount logic can yield negative amounts, enabling unintended behavior in pricing (e.g., negative cart discounts). The issue stems from insufficient inpu...
CVE-2021-4146: Undefined Security Weakness
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...
CVE-2021-4171
calibre-web is vulnerable to Business Logic Errors...
CVE-2021-4171
calibre-web is vulnerable to Business Logic Errors...
CVE-2021-4171
calibre-web is vulnerable to Business Logic Errors...