Beveiligingsadvies

CVE-2020-9009

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-11 00:00:00

Laatst bijgewerkt 2025-02-11 17:35:54

Toegewezen door mitre

CVSS-score 3.7

Status PUBLISHED

Beschrijving

The ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert arbitrary information into the database (via action=shipnotify) because access to this endpoint is completely unchecked. The attacker must guess an order number.

← Alle CVE's bekijken Bekijk op cve.org ↗