Lucene search
HistorySep 27, 2023 - 3:19 p.m.
CVE-2023-43493
sql injection
welcart e-commerce
unauthorized access
sensitive data
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
21.4%
SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information.
Affected configurations
Node
collnewelcart_e-commerceRange2.7–2.8.21wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| collne | welcart_e-commerce | * | cpe:2.3:a:collne:welcart_e-commerce:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Sql injection
2023-09-27 15:19:00
cve
cve
CVE-2023-43493
2023-09-27 15:19:34
vulnrichment
vulnrichment
CVE-2023-43493
2023-09-26 08:18:24
wpvulndb
wpvulndb
Welcart e-Commerce < 2.8.22 - Author+ SQL Injection
2023-09-28 00:00:00
cvelist
cvelist
CVE-2023-43493
2023-09-26 08:18:24
jvn
jvn
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
21.4%
Related for NVD:CVE-2023-43493