PT-2017-15204
CVE-2017-2139
·
تاريخ النشر
2017-04-28
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3)
CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3)
Description
The issue allows remote attackers to bypass access restrictions and obtain customer information. This is achieved via the orders.pre.php file.
Recommendations
For CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3), restrict access to the orders.pre.php file until a fix is available.
For CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3), restrict access to the orders.pre.php file until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾