Lucene search
+L

7 matches found

NVD
NVD
•added 2024/12/27 7:15 p.m.•23 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.9CVSS0.00627EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/27 12:00 a.m.•9 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.7AI score0.00627EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/27 12:00 a.m.•9 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

6.8AI score0.00631EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/27 12:00 a.m.•26 views

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

0.00631EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/27 12:00 a.m.•90 views

CVE-2024-50945

The open-source e-commerce system SimplCommerce contains an improper access control vulnerability (specifically Broken Access Control ) in its review system. The flaw exists at commit 230310c8d7a0408569b292c5a805c459d47a1d8f , allowing unauthorized users to submit product reviews without verifyin...

7.5CVSS6.9AI score0.00631EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/27 12:00 a.m.•34 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

0.00627EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•18 views

PT-2024-34466 · Unknown · Simplcommerce

Name of the Vulnerable Software and Affected Versions: SimplCommerce version 230310c8d7a0408569b292c5a805c459d47a1d8f Description: An improper access control issue exists, allowing users to submit reviews without verifying if they have purchased the product. This issue affects the review system,...

7.5CVSS7AI score0.00631EPSS
SaveExploits0References13
Rows per page
Query Builder