CVE-2015-0950

概要

参考情報

• kb.cert.org/vuls/id/924124 · Third Party Advisory
• blog.x-cart.com/5-1-11-released.html · Patch

x-cart のその他の脆弱性

• CVE-2019-7220中 6.1X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter.
• CVE-2017-15285高 8.8X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails …
• CVE-2015-5455中 4.3Cross-site scripting (XSS) vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unsp…
• CVE-2015-0951中 6.5X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2)…
• CVE-2015-1178中 4.3Multiple cross-site scripting (XSS) vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow remote attackers to inject arbitrary web s…