CVE-2017-2138

概要

参考情報

• tips.cs-cart.jp/fix-csrf-20170406.html · Vendor Advisory
• jvn.jp/en/jp/JVN87770873/index.html · Third Party Advisory

cs-cart のその他の脆弱性

• CVE-2025-50850高 8.6An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verificati…
• CVE-2025-50848中 6.1A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code. CS Cart 4.18.3 allows unrestricted…
• CVE-2025-50847中 6.5Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafte…
• CVE-2021-32202中 6.1In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation pa…
• CVE-2017-15673高 7.2The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors inv…