Vulnerabilities > CVE-2018-8761 - Unspecified vulnerability in Yxcms 1.4.7
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
protected\apps\member\controller\shopcarController.php in Yxcms building system (compatible cell phone) v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |