POC详情： 757c531c8cbd2cb33d70a72faa5995fb037f1946

来源
https://github.com/AbdullahAlmutawa/CVE-2024-50944
关联漏洞
标题： SimplCommerce 安全漏洞 (CVE-2024-50944)
描述：SimplCommerce是SimplCommerce开源的一个基于 .NET 构建的简单、跨平台、模块化电子商务系统。 SimplCommerce存在安全漏洞，该漏洞源于存在整数溢出漏洞。
描述
Integer Overflow in Cart Logic in SimplCommerce allows remote attackers to manipulate product quantities and total prices via crafted inputs that exploit insufficient validation of the quantity parameter.
介绍
# CVE-2024-50944
SimplCommerce is affected by an integer overflow vulnerability in the cart logic, allowing manipulation of product quantities and total prices via crafted quantity parameters.



# Detection Method
An attacker can detect this vulnerability by adding a product to the cart with a quantity of 2,147,483,647 and then adding one more. If the quantity and total price turn negative, it confirms that the site is vulnerable to integer overflow.


# Tested on
230310c8d7a0408569b292c5a805c459d47a1d8f commit


# Links
https://www.simplcommerce.com/

https://github.com/simplcommerce/SimplCommerce

# Disclosur Timeline	


# Credits
Abdullah Almutawa
文件快照

 [4.0K]  /data/pocs/757c531c8cbd2cb33d70a72faa5995fb037f1946
└── [ 660]  README.md

0 directories, 1 file
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。