CVE-2022-27168

概要

参考情報

• litecart/litecart · Third Party Advisory
• litecart/litecart commit 050fea8 · Patch
• jvn.jp/en/jp/JVN32625020/index.html · Patch
• litecart.net/en · Product

litecart のその他の脆弱性

• CVE-2020-9018中 5.3LiteCart through 2.2.1 allows admin/?app=users&doc=edit_user CSRF to add a user.
• CVE-2020-9017高 8.0LiteCart through 2.2.1 allows CSV injection via a customer's profile.
• CVE-2018-12256高 8.8admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file (resulting in remo…
• CVE-2018-10827高 7.5LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public_h…
• CVE-2014-7183中 4.3Multiple cross-site scripting (XSS) vulnerabilities in the search.php in LiteCart 1.1.2.1 and earlier allow remote attackers to inject arbit…