CVE-2023-43149: Cross-Site Request Forgery (CSRF)

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

CVE-2023-43148

The CVE-2023-43148 issue affects SPA-Cart version 1.9.0.3, where a Cross-Site Request Forgery (CSRF) vulnerability could allow a remote attacker to delete all user accounts. Root cause is a CSRF flaw in SPA-Cart 1.9.0.3; no explicit patch/version fix is provided in the connected documents. Exploi...

CVE-2023-43148: Cross-Site Request Forgery (CSRF)

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

SPA-Cart eCommerce CMS Cross-Site Request Forgery Vulnerability

SPA-Cart eCommerce CMS is a CMS system from SPA-Cart Inc. A security vulnerability exists in SPA-Cart eCommerce CMS version 1.9.0.3 that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit the vulnerability to add an administrator user with role...

CVE-2023-43149

CVE-2023-43149 affects SPA-Cart 1.9.0.3. The documents confirm a CSRF vulnerability enabling a remote attacker to add an admin user with role status. They do not provide concrete technical details (endpoints, payloads, root cause) or remediation within the supplied sources. No exploitation specif...

SPA-Cart eCommerce CMS Cross-Site Request Forgery Vulnerability

SPA-Cart eCommerce CMS is a CMS system from SPA-Cart Inc. A security vulnerability exists in SPA-Cart eCommerce CMS version 1.9.0.3 that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit the vulnerability to delete all accounts...

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

Simple and Nice Shopping Cart Script Code Issue Vulnerability

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A security vulnerability exists in Simple and Nice Shopping Cart Script v.1.0, which originates from a file upload vulnerability. The vulnerability can be exploited to execute arbitrary code via the edit profile...

CVE-2023-44061

The CVE-2023-44061 entry concerns the Simple and Nice Shopping Cart Script v1.0. A vulnerability in the upload function of the edit profile component enables a remote attacker to execute arbitrary code. This is described with a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, low at...

PT-2023-29085

Name of the Vulnerable Software and Affected Versions Simple and Nice Shopping Cart Script version 1.0 Description The issue allows a remote attacker to execute arbitrary code via the upload function in the edit profile component. This is a result of a File Upload vulnerability. Recommendations F...

CVE-2023-44061: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)

Software Abandoned Cart Lite for WooCommerce Type Plugin Vulnerable versions = 5.15.2 Fixed in 5.16.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44986 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3d15bd807ee2 Credits Robert DeVore...