1517 matches found
CVE-2022-31498
LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...
CVE-2022-31498
LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...
CVE-2022-31498
LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...
PT-2022-20766
Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for key XSS in the interface/orders/patient match dialog.php file. Recommendations For LibreHealth EHR Base version 2.0.0, consider disabling access to the interface/orders/patien...
CVE-2022-31498: Improper Neutralization of Input During Web Page Generation
LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...
A malicious zone operator can piggyback other transactions, when a caller tries to fulfill the restricted order
Lines of code Vulnerability details If an order has a restricted order type and, if the caller is other than the offerer or zone, then a staticcall to isValidOrder on the zone is made. This call outside the Seaport contract opens up a possible misuse by the zone contract implementation. The zone...
uint120 overflow for partially fillable orders in OrderValidator.sol
Lines of code Vulnerability details Repo commit referenced: 49799ce156d979132c9924a739ae45a38b39ecdd Impact In the lines OrderValidator.solL223-L239 where the orderStatus for an orderHash gets updated: orderStatusorderHash.numerator = uint120 filledNumerator + numerator ;...
Can overfill orders
Lines of code Vulnerability details Impact There's a bug in the partial order filling that allows an attacker to overfill any order fill more than the total size of the order. This bug happens because the fractions are stored as uint120s in orderStatus but intermediate computations to scale the...
CVE-2022-30797
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php...
Truncation in OrderValidator can lead to resetting the fill and selling more tokens
Lines of code Vulnerability details Impact A partial order's fractions numerator and denominator can be reset to 0 due to a truncation. This can be used to craft malicious orders: 1. Consider user Alice, who has 100 ERC1155 tokens, who approved all of their tokens to the marketplaceContract. 2...
Cancelled orders cannot be valid again
Lines of code Vulnerability details Impact The validate function will call the verifyOrderStatus function. When orderStatus.isCancelled == true, the canceled order cannot be set as valid. function verifyOrderStatus bytes32 orderHash, OrderStatus memory orderStatus, bool onlyAllowUnused, bool...
CVE-2022-31329: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php...
PT-2022-20691
Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/orders/loaddata.php" API endpoint. Recommendations For version 2.3.2, update to a newer version that contains a fix for this...
WooCommerce Incorrect Authorization
The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the orderid parameter in a fetchorderstatus action...
GHSA-VX2G-F45P-J674 Magento 2 Community Edition XSS Vulnerability
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status...
Magento 2 Community Edition XSS Vulnerability
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status...
GHSA-CMPM-JG8R-FV37 Apache Struts Multiple Cross-site Scripting Vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 lastName parameter to struts2-showcase/person/editPerson.action, or the 3 clientName parameter to struts2-rest-showcase/orders...
CVE-2022-30400
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...
