CVE-2014-7183

概要

参考情報

• packetstormsecurity.com/files/128768/LiteCart-1.1.2.1-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Nov/84 · Third Party Advisory
• securityfocus.com/archive/1/533748/100/0/threaded
• securityfocus.com/bid/70662 · Exploit
• netsparker.com/xss-vulnerabilities-in-litecart · Exploit

litecart のその他の脆弱性

• CVE-2022-27168中 6.1Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecifie…
• CVE-2020-9018中 5.3LiteCart through 2.2.1 allows admin/?app=users&doc=edit_user CSRF to add a user.
• CVE-2020-9017高 8.0LiteCart through 2.2.1 allows CSV injection via a customer's profile.
• CVE-2018-12256高 8.8admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file (resulting in remo…
• CVE-2018-10827高 7.5LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public_h…