CVE-2017-2138

Mô tả

Tham khảo

• tips.cs-cart.jp/fix-csrf-20170406.html · Vendor Advisory
• jvn.jp/en/jp/JVN87770873/index.html · Third Party Advisory

Lỗ hổng khác của cs-cart

• CVE-2025-50850CAO 8.6An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verificati…
• CVE-2025-50848TRUNG BÌNH 6.1A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code. CS Cart 4.18.3 allows unrestricted…
• CVE-2025-50847TRUNG BÌNH 6.5Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafte…
• CVE-2021-32202TRUNG BÌNH 6.1In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation pa…
• CVE-2017-15673CAO 7.2The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors inv…