PT-2017-15204
CVE-2017-2139
·
Publicado
2017-04-28
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3)
CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3)
Description
The issue allows remote attackers to bypass access restrictions and obtain customer information. This is achieved via the orders.pre.php file.
Recommendations
For CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3), restrict access to the orders.pre.php file until a fix is available.
For CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3), restrict access to the orders.pre.php file until a fix is available.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾