Description (CNA)
Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hometory Co.,Ltd / Mangboard commerce package | affected unspecified through 1.3.8 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.