Lucene search
HistoryApr 03, 2023 - 3:15 p.m.
CVE-2023-1124
security vulnerability
ecommerce
http validation
lfi attack
admin privileges
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
37.2%
The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.
Affected configurations
Node
wpeasycartwp_easycartRange<5.4.3wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wpeasycart | wp_easycart | * | cpe:2.3:a:wpeasycart:wp_easycart:*:*:*:*:*:wordpress:*:* |
Related
wpexploit
wpexploit
Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
2023-03-13 00:00:00
wpvulndb
wpvulndb
Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
2023-03-13 00:00:00
cve
cve
CVE-2023-1124
2023-04-03 15:15:18
cvelist
cvelist
CVE-2023-1124 Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
2023-04-03 14:38:26
prion
prion
Design/Logic Flaw
2023-04-03 15:15:00
wordfence
wordfence
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
37.2%
Related for NVD:CVE-2023-1124