CVE-2024-50944 PoC — SimplCommerce 安全漏洞

Source

https://github.com/AbdullahAlmutawa/CVE-2024-50944

Associated Vulnerability

Title:SimplCommerce 安全漏洞 (CVE-2024-50944)
Description:Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method.

Description

Integer Overflow in Cart Logic in SimplCommerce allows remote attackers to manipulate product quantities and total prices via crafted inputs that exploit insufficient validation of the quantity parameter.

Readme

# CVE-2024-50944
SimplCommerce is affected by an integer overflow vulnerability in the cart logic, allowing manipulation of product quantities and total prices via crafted quantity parameters.



# Detection Method
An attacker can detect this vulnerability by adding a product to the cart with a quantity of 2,147,483,647 and then adding one more. If the quantity and total price turn negative, it confirms that the site is vulnerable to integer overflow.


# Tested on
230310c8d7a0408569b292c5a805c459d47a1d8f commit


# Links
https://www.simplcommerce.com/

https://github.com/simplcommerce/SimplCommerce

# Disclosur Timeline	


# Credits
Abdullah Almutawa

File Snapshot


 [4.0K]  /data/pocs/757c531c8cbd2cb33d70a72faa5995fb037f1946
└── [ 660]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!