CVE-2016-4862

概要

参考情報

• jvn.jp/en/jp/JVN55389065/index.html · Third Party Advisory
• jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000157.html · Third Party Advisory
• tips.cs-cart.jp/fix-twigmo-vulnerability-20160914.html · Patch
• securityfocus.com/bid/92992 · Third Party Advisory

cs-cart のその他の脆弱性

• CVE-2025-50850高 8.6An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verificati…
• CVE-2025-50848中 6.1A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code. CS Cart 4.18.3 allows unrestricted…
• CVE-2025-50847中 6.5Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafte…
• CVE-2021-32202中 6.1In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation pa…
• CVE-2017-15673高 7.2The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors inv…