CVE-2015-0951: Undefined Security Weakness

X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified 1 update or 2 remove request...

PT-2015-4990

Name of the Vulnerable Software and Affected Versions X-Cart versions prior to 5.1.11 Description The issue allows remote authenticated users to read or delete address data of arbitrary accounts. This can be achieved by sending a modified request to either update or remove address data...