Lucene search
K

7 matches found

OSV
OSV
added 2022/03/18 6:15 p.m.1 views

CVE-2021-4031

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

7.5CVSS5.8AI score0.00457EPSS
Exploits0References1
NVD
NVD
added 2022/03/18 6:15 p.m.10 views

CVE-2021-4031

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

7.5CVSS0.00457EPSS
Exploits0References1
Prion
Prion
added 2022/03/18 6:15 p.m.14 views

Cross site request forgery (csrf)

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

5CVSS7.5AI score0.00457EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/03/18 5:59 p.m.75 views

CVE-2021-4031

CVE-2021-4031 affects the Syltek application prior to version 10.22.00. The root cause is insufficient verification of a product’s payment data, allowing a forged request to mark items as paid without proper authentication. Impact is payment system bypass with high integrity-risk (CVE metrics: CV...

7.5CVSS7.5AI score0.00457EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/18 5:59 p.m.15 views

CVE-2021-4031 Syltek Insufficient Verification of Data Authenticity

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

7.5CVSS7.7AI score0.00457EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/03/18 12:0 a.m.2 views

Syltek application 数据伪造问题漏洞

Syltek application is an application. A security vulnerability previously existed in the Syltek application version 10.22.00 that allowed an attacker to spoof a request and bypass the payment system by marking the item as paid without any authentication...

7.5CVSS7.4AI score0.00457EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/14 8:0 a.m.5 views

CVE-2021-4031

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

7.5CVSS7.2AI score0.00457EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder