| शीर्षक | PHPEMS <=11.0 Race Condition |
|---|
| विवरण | The coupon recharge function in PHPEMS (a web-based exam simulation system) is vulnerable to a Race Condition. By sending multiple concurrent requests with the same valid coupon code, an attacker can exploit the lack of atomicity checks on the coupon's usage status and inventory. This allows the same coupon to be recharged repeatedly, resulting in unauthorized accumulation of virtual assets (or potential financial losses if the coupons are tied to real currency) in the attacker's account. |
|---|
| स्रोत | ⚠️ https://byebydoggy.github.io/post/2025/1229-phpems-coupon-recharge-race-condition-poc/ |
|---|
| उपयोगकर्ता | byebyedoggy (UID 90091) |
|---|
| सबमिशन | 29/12/2025 05:27 AM (10 महीनों पहले) |
|---|
| संयम | 29/12/2025 09:16 AM (4 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 338632 [PHPEMS तक 11.0 Coupon रेस कंडीशन] |
|---|
| अंक | 20 |
|---|