CVE-2017-2138

Cross-site request forgery CSRF vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2138

CVE-2017-2138 affects CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2/v3) and CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2/v3). It is a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of administrators ...

CVE-2017-2138: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2017-15203 · Cs Cart · Cs-Cart Japanese Edition +1

Name of the Vulnerable Software and Affected Versions: CS-Cart Japanese Edition versions 4.3.10 and earlier excluding v2 and v3 CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier excluding v2 and v3 Description: A cross-site request forgery CSRF issue allows remote attackers to hija...

CS-Cart Japanese Edition and Multivendor Japanese Edition Unrestricted Access Vulnerability

CS-Cart Japanese Edition is a PHP and MySQL based e-commerce software system developed by CS-Cart team. The system supports third-party software extensions, customized promotion strategies, product filter definitions, etc. CS-Cart Multivendor Japanese Edition is an extension of CS-Cart Japanese...

cs.rochester.edu XSS vulnerability

Vulnerable URL: https://cs.rochester.edu/nelson/wildflowers/makepage.php?flowerdname=1"...

CVE-2017-9419

Cross-site scripting XSS vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter...

PT-2017-18908 · Webhammer · Webhammer Wp Custom Fields Search

Name of the Vulnerable Software and Affected Versions: Webhammer WP Custom Fields Search plugin version 0.3.28 Description: The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary JavaScript code. This is achieved via the cs-all-0 paramete...

CVE-2017-9419: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter...

CVE-2017-2139

CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...

CVE-2017-2143

CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...

CVE-2017-2143

CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...

CVE-2017-2139

CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...

Design/Logic Flaw

CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...

Authentication flaw

CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...

CVE-2017-2139

CS-Cart Japanese Edition (and CS-Cart Multivendor Japanese Edition) versions up to 4.3.10 are affected. The issue allows remote attackers to bypass access restrictions (CWE-425) and obtain customer information via orders.pre.php. Impact is unauthenticated access to consumer data (e.g., name and s...

CVE-2017-2143

CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, and CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier, are affected by an unauthenticated access-permission bypass (CWE-425) that allows a remote attacker to bypass restrictions and create a request to return a customer-purchased item...

CVE-2017-2143

CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...

CVE-2017-2139

CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...