CVE-2018-8761 | BDVDB-2026-98068 Detail

Description#

protected\apps\member\controller\shopcarController.php in Yxcms building system (compatible cell phone) v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/QQ704568679/-/blob/master/YXcms%20TheCode%20audit

Exploit#

No public exploit known

History#

Version 12018-03-19Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.