CVE-2020-9017

2020-02-2517:15:13

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.8%

LiteCart through 2.2.1 allows CSV injection via a customer’s profile.

CPENameOperatorVersion
litecarteq2.1.3
litecarteq2.1.5
litecarteq2.2.0
litecarteq2.1.4
litecarteq2.1.6
litecarteq2.2-de
litecarteq2.2.1

Name	Operator	Version
litecart	eq	2.1.3
litecart	eq	2.1.5
litecart	eq	2.2.0
litecart	eq	2.1.4
litecart	eq	2.1.6
litecart	eq	2.2-de
litecart	eq	2.2.1

References

cert.ikiu.ac.ir/public-files/pages/attachments/11/e8e09da3c5702511520810527af5b313.pdf

uploadboy.com/7njf43f167is/384/mp4