6041 matches found
CVE-2017-8833: Improper Neutralization of Input During Web Page Generation
Zen Cart 1.6.0 has XSS in the mainpage parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."...
abosseyokai.net XSS vulnerability
Vulnerable URL: http://abosseyokai.net/scripts/add-to-cart.php?id=262"alert/OPENBUGBOUNTY/...
CVE-2017-2139
CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...
CVE-2017-2143
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...
CVE-2017-2143
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...
CVE-2017-2117
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors...
CVE-2017-2139
CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...
Authentication flaw
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...
Design/Logic Flaw
CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...
CVE-2017-2090
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...
CVE-2017-2098
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...
CVE-2017-2139
CS-Cart Japanese Edition (and CS-Cart Multivendor Japanese Edition) versions up to 4.3.10 are affected. The issue allows remote attackers to bypass access restrictions (CWE-425) and obtain customer information via orders.pre.php. Impact is unauthenticated access to consumer data (e.g., name and s...
CVE-2017-2139
CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...
CVE-2017-2143
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...
CVE-2017-2143
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, and CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier, are affected by an unauthenticated access-permission bypass (CWE-425) that allows a remote attacker to bypass restrictions and create a request to return a customer-purchased item...
PT-2017-15207
Name of the Vulnerable Software and Affected Versions CS-Cart Japanese Edition versions 4.3.10-jp-1 and earlier CS-Cart Multivendor Japanese Edition versions 4.3.10-jp-1 and earlier Description The issue allows remote attackers to bypass access restrictions and create a request to return a...
PT-2017-15204
Name of the Vulnerable Software and Affected Versions CS-Cart Japanese Edition versions 4.3.10 and earlier excluding v2 and v3 CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier excluding v2 and v3 Description The issue allows remote attackers to bypass access restrictions and obtai...
CVE-2017-2143: Direct Request
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...
CVE-2017-2139: Direct Request
CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php...