CVE-2024-2267

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument product_price leads to business logic errors. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256037 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-840

• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/Business%20Logic/Business%20Logic%20shop.php%20.mdBroken Link
• https://vuldb.com/?ctiid.256037Permissions Required
• https://vuldb.com/?id.256037Third Party Advisory
• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/Business%20Logic/Business%20Logic%20shop.php%20.mdBroken Link
• https://vuldb.com/?ctiid.256037Permissions Required
• https://vuldb.com/?id.256037Third Party Advisory

Published

Mar 7, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22654tcpreplay v4.4.4 was discovered to contain an infinite loop …7.5
• CVE-2024-2266A vulnerability has been found in keerti1924 Secret-Coder-PH…6.1
• CVE-2024-22660TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vu…9.8
• CVE-2024-22662TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow v…9.8
• CVE-2024-22663TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection…9.8
• CVE-2024-22667Vim before 9.0.2142 has a stack-based buffer overflow becaus…7.8
• CVE-2024-2268A vulnerability was found in keerti1924 Online-Book-Store-We…9.8
• CVE-2024-22682Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-2269A vulnerability was found in keerti1924 Online-Book-Store-We…9.8
• CVE-2024-22699FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vul…8.8
• CVE-2024-2270A vulnerability was found in keerti1924 Online-Book-Store-We…6.1
• CVE-2024-22705An issue was discovered in ksmbd in the Linux kernel before …7.8