Lucene search
+L

4961 matches found

CNNVD
CNNVD
added 2023/10/16 12:00 a.m.20 views

WordPress Plugin Abandoned Cart Lite for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6AI score0.00316EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/12 7:15 p.m.8 views

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

8.1CVSS5.8AI score0.00487EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/10/12 7:15 p.m.5 views

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

8.1CVSS7.3AI score0.00487EPSS
SaveExploits1References2
Prion
Prion
added 2023/10/12 7:15 p.m.20 views

Cross site request forgery (csrf)

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

5.8CVSS8.1AI score0.00487EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2023/10/12 6:15 p.m.12 views

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

8.8CVSS5.8AI score0.00542EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/10/12 6:15 p.m.6 views

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

8.8CVSS7.3AI score0.00542EPSS
SaveExploits1References2
Prion
Prion
added 2023/10/12 6:15 p.m.17 views

Cross site request forgery (csrf)

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

6.8CVSS8.7AI score0.00542EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/12 12:00 a.m.17 views

PT-2023-28719 · Spa-Cart · Spa-Cart

Name of the Vulnerable Software and Affected Versions: SPA-Cart version 1.9.0.3 Description: The issue allows a remote attacker to add an admin user with role status due to Cross Site Request Forgery CSRF. Recommendations: For SPA-Cart version 1.9.0.3, at the moment, there is no information about...

8.8CVSS8.5AI score0.00542EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2023/10/12 12:00 a.m.10 views

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

7.1AI score0.00487EPSS
SaveExploits1References1
CVE
CVE
added 2023/10/12 12:00 a.m.64 views

CVE-2023-43148

The CVE-2023-43148 issue affects SPA-Cart version 1.9.0.3, where a Cross-Site Request Forgery (CSRF) vulnerability could allow a remote attacker to delete all user accounts. Root cause is a CSRF flaw in SPA-Cart 1.9.0.3; no explicit patch/version fix is provided in the connected documents. Exploi...

8.1CVSS8.1AI score0.00487EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/10/12 12:00 a.m.33 views

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

8.9AI score0.00542EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/10/12 12:00 a.m.7 views

SPA-Cart eCommerce CMS Cross-Site Request Forgery Vulnerability

SPA-Cart eCommerce CMS is a CMS system from SPA-Cart Inc. A security vulnerability exists in SPA-Cart eCommerce CMS version 1.9.0.3 that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit the vulnerability to add an administrator user with role...

8.8CVSS6.7AI score0.00542EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/10/12 12:00 a.m.15 views

PT-2023-28718 · Spa-Cart · Spa-Cart

Name of the Vulnerable Software and Affected Versions: SPA-Cart version 1.9.0.3 Description: The issue allows a remote attacker to delete all accounts due to a Cross Site Request Forgery CSRF vulnerability. Recommendations: For SPA-Cart version 1.9.0.3, at the moment, there is no information abou...

8.1CVSS8.1AI score0.00487EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/10/12 12:00 a.m.13 views

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

7.1AI score0.00542EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/10/12 12:00 a.m.9 views

SPA-Cart eCommerce CMS Cross-Site Request Forgery Vulnerability

SPA-Cart eCommerce CMS is a CMS system from SPA-Cart Inc. A security vulnerability exists in SPA-Cart eCommerce CMS version 1.9.0.3 that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit the vulnerability to delete all accounts...

8.1CVSS6.8AI score0.00487EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/10/12 12:00 a.m.30 views

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

8.4AI score0.00487EPSS
SaveExploits1References1
CVE
CVE
added 2023/10/12 12:00 a.m.61 views

CVE-2023-43149

CVE-2023-43149 affects SPA-Cart 1.9.0.3. The documents confirm a CSRF vulnerability enabling a remote attacker to add an admin user with role status. They do not provide concrete technical details (endpoints, payloads, root cause) or remediation within the supplied sources. No exploitation specif...

8.8CVSS8.7AI score0.00542EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2023/10/06 11:15 p.m.11 views

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

8.8CVSS6.1AI score0.01238EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/10/06 11:15 p.m.6 views

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

8.8CVSS6.3AI score0.01238EPSS
SaveExploits1References2
NVD
NVD
added 2023/10/06 11:15 p.m.23 views

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

8.8CVSS8.9AI score0.01238EPSS
SaveExploits1References1
Rows per page
Query Builder