CVE-2023-26688

The e-commerce platform CS-Cart MultiVendor version 4.16.1 is affected by a Cross Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input via the product_data parameter within the add/edit product functionality of the administration interface. A remote attacker ...

CVE-2023-26686

A File Upload vulnerability exists in CS-Cart MultiVendor version 4.16.1 . This flaw allows remote attackers to execute arbitrary code by exploiting the image upload feature during shop customization. To mitigate this risk, it is recommended to disable the image upload feature or restrict access ...

CVE-2023-26691

Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on...

CVE-2023-26690

File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in the vendor or admin menu...

CVE-2023-26691

A Directory Traversal vulnerability exists in CS-Cart MultiVendor version 4.16.1 due to insufficient control over resources with dynamic management. Remote attackers can exploit this flaw by providing a crafted zip file during the installation of a new add-on, which can lead to arbitrary code exe...

CVE-2023-26687

Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the productdata parameter in the PDF Add-on...

CVE-2023-26689

An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request...

CVE-2023-26689

CS-Cart MultiVendor version 4.16.1 is vulnerable to an issue that allows an attacker to alter arbitrary user account profiles by sending a crafted POST request . Exploitation of this vulnerability could lead to unauthorized modification of user data. As a remediation, it is recommended to disable...

CVE-2023-26687

A Directory Traversal vulnerability exists in CS-Cart MultiVendor version 4.16.1 within the PDF Add-on . Remote attackers can exploit this flaw by manipulating the product_data parameter to access sensitive files or directories that should be restricted. As a workaround, it is recommended to disa...

CVE-2023-26688

Cross Site Scripting XSS vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the productdata parameter of add/edit product in the administration interface...

CVE-2023-26686

File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop...

CVE-2023-26687

Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the productdata parameter in the PDF Add-on...

CVE-2023-26690

File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in the vendor or admin menu...

CVE-2023-26691

Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on...

CVE-2023-26689

An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request...

PT-2024-12108 · Cs Cart Multivendor +1 · Pdf Add-On +1

Name of the Vulnerable Software and Affected Versions: CS-Cart MultiVendor version 4.16.1 Description: The issue allows remote attackers to obtain sensitive information via the product data parameter in the PDF Add-on. This is a Directory Traversal vulnerability, which can be exploited to access...

PT-2024-12109

Name of the Vulnerable Software and Affected Versions CS-Cart MultiVendor version 4.16.1 Description A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the product data parameter of add/edit product in the administration interface. This enables attackers to execute...

CVE-2023-26686

File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop...

CVE-2023-26690

The e-commerce platform CS-Cart MultiVendor version 4.16.1 is susceptible to a File Upload vulnerability within the File Manager/Editor component located in the vendor or admin menu. This flaw allows remote attackers to upload dangerous files without limitations, leading to arbitrary code executi...

PT-2024-12111

Name of the Vulnerable Software and Affected Versions CS-Cart MultiVendor version 4.16.1 Description The issue allows remote attackers to run arbitrary code via the File Manager/Editor component in the vendor or admin menu. This is a result of a File Upload vulnerability. Recommendations For...