POC详情： 314fdc6c27528bf1f0b16393d84490922141a438

来源
https://github.com/AbdullahAlmutawa/CVE-2024-53476
关联漏洞
标题： SimplCommerce 安全漏洞 (CVE-2024-53476)
描述：SimplCommerce是SimplCommerce开源的一个基于 .NET 构建的简单、跨平台、模块化电子商务系统。 SimplCommerce存在安全漏洞。攻击者利用该漏洞可以绕过库存限制，从多个账户同时提交同一产品的购买请求。
描述
SimplCommerce is affected by a race condition vulnerability in the checkout logic, allowing multiple users to purchase more products than are in stock via simultaneous checkout requests.
介绍
# CVE-2024-53476
SimplCommerce is affected by a race condition vulnerability in the checkout logic, allowing multiple users to purchase more products than are in stock via simultaneous checkout requests.

# Detection Method
An attacker can detect this vulnerability by attempting to purchase a product at almost the same time with limited stock (stock = 1) using two accounts. If both accounts successfully purchase the product, it confirms the presence of a race condition. This can be done using custom scripts or Burp Suite turbo intruder to send concurrent checkout requests.

# Tested on
230310c8d7a0408569b292c5a805c459d47a1d8f commit

#Links
https://www.simplcommerce.com/

https://github.com/simplcommerce/SimplCommerce

# Disclosure Timeline

# Credits
Abdullah Almutawa
文件快照

 [4.0K]  /data/pocs/314fdc6c27528bf1f0b16393d84490922141a438
└── [ 780]  README.md

0 directories, 1 file
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。