DBShop 代码注入漏洞

DBShop is a generation of e-commerce system from China Longda Vantage DBShop Company. A code injection vulnerability exists in DBShop 3.3 Release 231225. An attacker exploits this vulnerability to cause a cross-site scripting attack by using the input %22%3E%3Csvg%20onload=alert5888%3E incorrectl...

CVE-2024-12991: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. It has been declared as problematic. This vulnerability affects unknown code of the file /home-order. The manipulation of the argument orderStatus with the input %22%3E%3Csvg%20onload=alert5888%3E leads ...

uint120 overflow for partially fillable orders in OrderValidator.sol

Lines of code Vulnerability details Repo commit referenced: 49799ce156d979132c9924a739ae45a38b39ecdd Impact In the lines OrderValidator.solL223-L239 where the orderStatus for an orderHash gets updated: orderStatusorderHash.numerator = uint120 filledNumerator + numerator ;...