CVE-2024-50944 PoC — SimplCommerce 安全漏洞

Source

https://github.com/AbdullahAlmutawa/CVE-2024-50944

Associated Vulnerability

Title:SimplCommerce 安全漏洞 (CVE-2024-50944)
Description:SimplCommerce是SimplCommerce开源的一个基于 .NET 构建的简单、跨平台、模块化电子商务系统。 SimplCommerce存在安全漏洞，该漏洞源于存在整数溢出漏洞。

Description

Integer Overflow in Cart Logic in SimplCommerce allows remote attackers to manipulate product quantities and total prices via crafted inputs that exploit insufficient validation of the quantity parameter.

Readme

# CVE-2024-50944
SimplCommerce is affected by an integer overflow vulnerability in the cart logic, allowing manipulation of product quantities and total prices via crafted quantity parameters.



# Detection Method
An attacker can detect this vulnerability by adding a product to the cart with a quantity of 2,147,483,647 and then adding one more. If the quantity and total price turn negative, it confirms that the site is vulnerable to integer overflow.


# Tested on
230310c8d7a0408569b292c5a805c459d47a1d8f commit


# Links
https://www.simplcommerce.com/

https://github.com/simplcommerce/SimplCommerce

# Disclosur Timeline	


# Credits
Abdullah Almutawa

File Snapshot


 [4.0K]  /data/pocs/757c531c8cbd2cb33d70a72faa5995fb037f1946
└── [ 660]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!