CVE-2020-11007

In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping cart. This has been patched in version 2.11.0.

• CWE-20
• CWE-20

• https://github.com/shopizer-ecommerce/shopizer/commit/929ca0839a80c6f4dad087e0259089908787ad2aPatch, Third Party Advisory
• https://github.com/shopizer-ecommerce/shopizer/security/advisories/GHSA-w8rc-pgxq-x2cjThird Party Advisory
• https://github.com/shopizer-ecommerce/shopizer/commit/929ca0839a80c6f4dad087e0259089908787ad2aPatch, Third Party Advisory
• https://github.com/shopizer-ecommerce/shopizer/security/advisories/GHSA-w8rc-pgxq-x2cjThird Party Advisory

Published

Apr 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11001In Wagtail before versions 2.8.1 and 2.7.2, a cross-site scr…6.8
• CVE-2020-11002dropwizard-validation before versions 2.0.3 and 1.3.21 has a…8.8
• CVE-2020-11003Oasis before version 2.15.0 has a potential DNS rebinding or…8.1
• CVE-2020-11004SQL Injection was discovered in Admidio before version 3.3.1…7.5
• CVE-2020-11005The WindowsHello open source library (NuGet HaemmerElectroni…5.5
• CVE-2020-11006In Shopizer before version 2.11.0, a script can be injected …5.4
• CVE-2020-11008Affected versions of Git have a vulnerability whereby Git ca…7.5
• CVE-2020-11009In Rundeck before version 3.2.6, authenticated users can cra…6.5
• CVE-2020-1101A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
• CVE-2020-11010In Tortoise ORM before versions 0.15.23 and 0.16.6, various …8.8
• CVE-2020-11011In Phproject before version 1.7.8, there's a vulnerability w…8.8
• CVE-2020-11012MinIO versions before RELEASE.2020-04-23T00-58-49Z have an a…7.5