doyocms平行权限问题之泄露订单

- AV AC AU C I A
发布： 2025-04-13
修订： 2025-04-13

### 简要描述： doyocms平行权限问题之泄露订单 ### 详细说明： 订单越权查看漏洞 出现问题的代码位于source/member.php处 function myorder(){ if($this->syArgs('oid')||$this->syArgs('orderid',1)!=''){ if($this->syArgs('oid')){$r=array('id'=>$this->syArgs('oid'));}else{$r=array('orderid'=>$this->syArgs('orderid',1));} $this->order=syDB('order')->find($r); if($this->order['state']>0&&$this->order['virtual']==1)$this->virtuals=syDB('product_virtual')->findAll(array('oid'=>$this->order['id'],'state'=>1)); $this->goods=order_goods(unserialize($this->order['goods']),$this->order['logistics']); $this->info=unserialize($this->order['info']); $this->sendgoods=unserialize($this->order['sendgoods']); $total=0; foreach($this->goods[0] as $v){ $total=calculate($total,$v['total']); $total=calculate($total,$v['logistics_price']); } $this->aggregate=calculate($total, $this->order['favorable'],2); $this->display("member/myorderinfo.html"); }else{ $c=syClass('c_order'); $total_page=total_page($GLOBALS['G_DY']['db']['prefix'].'order where...

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有0条受影响产品信息