Raffle is fair only if tokenRange is a power of 2.

Lines of code Vulnerability details Impact Based on the contract logic, the raffle works by sampling a value $ x \in \mathbbZ | 0 \leq x \lt 2^256 $ aka uint256 from a uniform distribution provided by Chainlink VRF, then applying modulo tokenRange, generating a new value $ y \in \mathbbZ | 0 \leq...

Prize token can overlap with drawingToken and prize tokens from other draws.

Lines of code Vulnerability details Impact Creators can create multiple draws with the same prize, but only the first draw to call startDraw will have the prize. This can trick users into entering raffle pools that does not have a prize. Furthermore, the prize token can also be one of the tokens ...

In consistent parameters settings can break the business logic

Lines of code Vulnerability details Impact The usual business logic of the raffle should be that: If a user wins a raffle, he can always claim the NFT before a redraw can be initialized. However, the settings parameters can be set to inconsistent so that a winner may not be able to claim the NFT...

Malicious drawingToken can make bad actor claim the raffle NFT

Lines of code Vulnerability details Description Malicious drawingToken address passed into factory.makeNewDraw can claim the raffle NFT. It can be exploited via a social engineering attack or another scenario is that a malicious owner can pretend to make a raffle with a malicious drawingToken and...

Frontrunning the winnerClaimNFT is possible

Lines of code Vulnerability details Impact The winner in the NFT raffle may be frontrun if he has listed his NFT for sale on a marketplace, stealing his raffle NFT. Proof of Concept A new VRFNFTRandomDraw Clone contract is deployed using makeNewDraw, with some NFT collection as drawingToken and...

The recoverTimelock does not sufficiently protect against an admin withdrawing the NFT before a user is able to claim it

Lines of code Vulnerability details Impact When a VRFNFTRandomDraw contract is initialized, the recoverTimelock variable is set. The variable should be used to prevent the admin from calling the lastResortTimelockOwnerClaimNFT function before a certain amount of time has passed to ensure that the...

The raffle could be slightly unfair as the owner of NFT ID which is closer to drawingTokenStartId could have more chance to win

Lines of code Vulnerability details Impact The raffle could be slightly unfair as the owner of NFT ID which is closer to drawingTokenStartId could have more chance to win. Proof of Concept As written in , "We want to raffle away a single NFT token based off of another NFT collection or drawingTok...

LOWER BOUNDARY OF DRAWING TOKEN RANGE IS TOO LOW

Lines of code Vulnerability details Impact The current logic in VRFNFTRandomDraw.sol could lead to undesirable edge cases due to allowing the lower limit of the drawing token range to be as low as 2. It could lead to a long drag before the raffle could end or cancel if one of the drawing tokens i...

After the redrawing the winner can lose his NFT for the Admin

Lines of code Vulnerability details Impact The owner can manipulate the raffle by deprivation of a specific address winner Proof of Concept Please copy the following POC on VRFNFTRandomDraw.t.sol function testadminRedrawingandReclaimnft public address winner = address0x1337; address winner2 =...

Why Retailers Fail to Stop Shopping Bots

In the 1970s the United States encountered an “oil embargo” that dramatically curtailed people from being able to purchase gasoline for their vehicles. “No Gas Today” signs were everywhere. Gas rationing was imposed by only allowing car owners to buy gas based on whether the final numbers on thei...

CVE-2018-17379

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17379

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17379: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

PT-2018-14002

Name of the Vulnerable Software and Affected Versions Raffle Factory version 3.5.2 Description A SQL Injection issue exists in the Raffle Factory component for Joomla, specifically via the filter order Dir or filter order parameters. Recommendations For version 3.5.2, consider restricting access ...

CVE-2018-17379

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17379

CVE-2018-17379 affects the Joomla! Raffle Factory 3.5.2 component, exposing a SQL Injection vulnerability via the filter_order_Dir and filter_order parameters. This allows an attacker to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability (per CVSS metrics)....

Component Raffle Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component Raffle Factory. The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Joomla! Component Raffle Factory 3.5.2 - SQL Injection

Joomla! Component Raffle Factory 3.5.2 - SQL Injection Exploit Title: Joomla! Component Raffle Factory 3.5.2 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/auction/raffle-factory/...

Joomla Raffle Factory 3.5.2 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Raffle Factory 3.5.2 - SQL Injection Vendor Homepage: https://thephpfactory.com/ Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/auction/raffle-factory/ Version: 3.5.2 Category:...