68 matches found
GHSA-WJ36-V8J4-PC7C Authentication Bypass by Spoofing in express-cart
A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...
Improper access control
A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...
CVE-2018-16483
A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...
CVE-2018-16483
A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...
CVE-2018-16483
A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...
CVE-2018-16483
A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...
CVE-2018-16483
CVE-2018-16483 affects express-cart (
PT-2019-9307
Name of the Vulnerable Software and Affected Versions express-cart versions 1.1.5 and earlier Description A deficiency in the access control in the express-cart module allows unprivileged users to add new users to the application as administrators. Recommendations For express-cart versions 1.1.5...
CVE-2018-16483: Authentication Bypass by Spoofing
A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...
Privilege Escalation
Overview Versions of express-cart before 1.1.6 are vulnerable to privilege escalation. This vulnerability can be exploited so that normal users can escalate their privilege and add new administrator users. Recommendation Update to version 1.1.6 or later. References - HackerOne Report - Node.js...
NoSQL injection
Overview Versions of express-cart before 1.1.8 are vulnerable to NoSQL injection. The vulnerability is caused by the lack of user input sanitization in the login handlers. In both cases, the customer login and the admin login, parameters from the JSON body are sent directly into the MongoDB query...
SQL Injection
express-cart is vulnerable to SQL injection. A lack of user input sanitization in the login handlers allow attackers to inject MongoDB queries through the customer and admin login parameters. The vulnerability could be exploited to retrieve or modify arbitrary entries in the database...
Node.js third-party modules: [express-cart] Customer and admin email enumeration through MongoDB injection
I would like to report an injection in express-cart It allows to enumerate the email address of the customers and the administrators. Module module name: express-cart version: 1.1.7 npm page: https://www.npmjs.com/package/express-cart Module Description expressCart is a fully functional shopping...
Node.js third-party modules: Reflected XSS in the npm module express-cart.
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! I would like to report Reflected XSS in...
Privilege Escalation
express-cart is vulnerable to privilege escalation attacks. A malicious user can pass a crafted request to the endpoint containing the /admin/setup string to create a user that will be considered as an admin user...
PT-2018-11188
Name of the Vulnerable Software and Affected Versions Express-Cart versions prior to 1.1.6 Description The issue allows remote attackers to create an admin user via a "/admin/setup" API endpoint by manipulating the Referer header. Recommendations For versions prior to 1.1.6, update to version 1.1...
Express-cart Arbitrary File Upload Vulnerability
express-cart is a shopping cart module for use in Node.js. An arbitrary file upload vulnerability exists in express-cart versions prior to 1.1.7. An attacker can exploit this vulnerability to gain access on a hosted device...
Unrestricted file upload
Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...