CVEvulnerability
CVE-2015-0951
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2) remove request.
Affected configurations
• qualiteam x-cart (<= 5.1.10)
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/924124 Third Party Advisory, US Government Resource
- https://blog.x-cart.com/5-1-11-released.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/924124 Third Party Advisory, US Government Resource
- https://blog.x-cart.com/5-1-11-released.html Patch, Vendor Advisory