Design/Logic Flaw

2019-06-3019:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

44.7%

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.

CPENameOperatorVersion
ecommerceeq1.6.2

CPE	Name	Operator	Version
	ecommerce	eq	1.6.2

References

packetstormsecurity.com/files/147470/Arastta-1.6.2-Cross-Site-Scripting.html

0.001 Low

EPSS

Percentile

44.7%

Related for PRION:CVE-2018-20849