abdullahalmutawa/cve-2024-50944Integer Overflow in Cart Logic in SimplCommerce allows remote attackers to manipulate product quantities and total prices via crafted inputs that exploit insufficient validation of the quantity parameter.
SimplCommerce is affected by an integer overflow vulnerability in the cart logic, allowing manipulation of product quantities and total prices via crafted quantity parameters.
An attacker can detect this vulnerability by adding a product to the cart with a quantity of 2,147,483,647 and then adding one more. If the quantity and total price turn negative, it confirms that the site is vulnerable to integer overflow.
230310c8d7a0408569b292c5a805c459d47a1d8f commit
https://www.simplcommerce.com/
https://github.com/simplcommerce/SimplCommerce
https://github.com/simplcommerce/SimplCommerce/issues/1110
Abdullah Almutawa
