Other nomination
Common Security Issues in Financially-Oriented Web Applications
An NCC Group guideline cataloguing business-logic flaws specific to e-commerce and financial web applications: TOCTOU and race conditions on balance checks, parameter and currency manipulation, rounding and numeric overflow abuse, voucher, points and refund abuse, hidden backend APIs and test data left in production. The attacker gains money rather than code execution.
Record
- Researcher
- Soroush Dalili
- Format
- Whitepaper
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Soroush Dalili, first published at the original source. Preserved copies are kept so the citation survives its host.