4 matches found
CVE-2014-5516
Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...
CVE-2014-5516
KonaKart Storefront Application (DS Data Systems) prior to 7.3.0.0 is vulnerable to CSRF protection bypass that allows an attacker to hijack an administrator’s session by issuing a manipulated GET request to change a user email address. The issue is documented in CVE-2014-5516, with a remediation...
PT-2020-7719
Name of the Vulnerable Software and Affected Versions DS Data Systems KonaKart versions prior to 7.3.0.0 Description A cross-site request forgery CSRF issue exists in the Storefront Application, allowing remote attackers to hijack the authentication of administrators for requests that change a us...
CVE-2014-5516: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...