Attacker can frontrun user bid with wrong lotId and create the lot with that lotId, forcing the user to take a big loss

Lines of code Vulnerability details Impact User takes a huge loss by getting 1 SD token, but bidding an amount possibly much bigger. Attackers are incetivized to perform this if they are ETHx holders and want to increase the value of their tokens. Proof of Concept When a user adds a bid to the...

academies.thecpc.ac.uk XSS vulnerability

Vulnerable URL: http://www.academies.thecpc.ac.uk/suppliers/categories/lot.php?region=Scotland=9=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=251 Details: Description| Value ---|--- Patched:| Yes, at 07.03.2016 Latest check for patch:| 07.03.2016 19:25 GMT Vulnerability type:| XSS Vulnerability...