CVE-2018-19138

WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...

CVE-2018-19138

CVE-2018-19138 affects WSTMart versions around 2.0.7/2.0.8. The vulnerability is a Cross‑Site Request Forgery (CSRF) via the URI index.php/admin/staffs/add.html, which can allow an attacker to force actions in the background (e.g., adding an admin) without user consent. Connected exploit referenc...

CVE-2018-19138

WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...

WSTMart open source mall system payments.class.php there are arbitrary file read vulnerabilities

WSTMart open source mall , is a system that can help businesses and individuals to quickly build a community service system . WSTMart open source mall system payments.class.php there are arbitrary file reading vulnerabilities. Attackers can use this vulnerability to obtain sensitive information...

Two Pseudo-injection Vulnerabilities in WSTMart Frontend

WSTMart multi-user mall is a thinkphp5.0 for the core development of php multi-user B2B2C mall system. There are two pseudo-injection vulnerabilities in WSTMart frontend. An attacker can use this vulnerability to obtain database account password information...

WSTMart 'addressId' parameter has a design flaw vulnerability in Guangzhou Shangtao Information Technology Co.

WSTMart e-commerce system is based on THINKPHP 5.0 development of B2B2C integrated e-commerce system. There is a design flaw vulnerability in the WSTMart 'addressId' parameter of Guangzhou Shangtao Information Technology Co. Allow attackers to obtain database account password information...