CVE-2024-46307

https://notcve.org/view.php?id=CVE-2024-46307

09 Oct 2024 — A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products. • http://sparkshop.com • CWE-841: Improper Enforcement of Behavioral Workflow •