Логотип exploitDog
bind:CVE-2020-21503
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-21503

Количество 2

Количество 2

nvd логотип

CVE-2020-21503

больше 4 лет назад

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-42wv-rq8p-rm59

больше 3 лет назад

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2020-21503

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
github логотип
GHSA-42wv-rq8p-rm59

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу