CVE-2024-50968: adonesevangelista agri-trading_online_shopping_system
Vulnerability summary
CVE-2024-50968 is a high (CVSS 7.5) vulnerability in adonesevangelista agri-trading_online_shopping_system. EPSS estimates a 0.86% chance of exploitation in the next 30 days, higher than 58.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 14-11-2024PublishedVulnerability first disclosed.
- 20-11-2024Last modifiedVulnerability information updated.
Description
A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS trend
Probability
0.86%
Chance of exploitation in the next 30 days
Percentile
58%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.86% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundCve 2024 50968
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Adonesevangelista1 product
1 vendor · 1 product