CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

PT-2018-18617

Name of the Vulnerable Software and Affected Versions Yxcms building system compatible cell phone version 1.4.7 Description The issue is related to a logic flaw in the shopcarController.php file, which allows attackers to modify prices by analyzing data from packet captures before form submission...

CVE-2018-8761: Undefined Security Weakness

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...