Lucene search
K

7 matches found

NVD
NVD
added 2024/12/27 7:15 p.m.7 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.9CVSS0.00474EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/12/27 12:0 a.m.13 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

0.00474EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/12/27 12:0 a.m.6 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

6.8AI score0.04996EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/12/27 12:0 a.m.4 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.7AI score0.00474EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/12/27 12:0 a.m.10 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

0.04996EPSS
Exploits0References3
CVE
CVE
added 2024/12/27 12:0 a.m.68 views

CVE-2024-50945

CVE-2024-50945 concerns SimplCommerce. A commit (230310c8d7a0408569b292c5a805c459d47a1d8f) exhibits an improper access control in the review submission flow, allowing users to post reviews without confirming product purchase. Affected product: SimplCommerce (review system). Impact stated in sourc...

7.5CVSS6.9AI score0.04996EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/12/20 12:0 a.m.2 views

PT-2024-34466 · Unknown · Simplcommerce

Name of the Vulnerable Software and Affected Versions: SimplCommerce version 230310c8d7a0408569b292c5a805c459d47a1d8f Description: An improper access control issue exists, allowing users to submit reviews without verifying if they have purchased the product. This issue affects the review system,...

7.5CVSS7AI score0.04996EPSS
Exploits0References13
Rows per page
Query Builder