The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN61578437/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118 | Third Party Advisory VDB Entry Vendor Advisory |
http://www.welcart.com/community/archives/78977 | Vendor Advisory |
Configurations
History
09 Sep 2021, 12:41
Type | Values Removed | Values Added |
---|---|---|
References | (JVNDB) http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118 - Third Party Advisory, VDB Entry, Vendor Advisory | |
CPE | cpe:2.3:a:collne:welcart_e-commerce:*:*:*:*:*:wordpress:*:* |
Information
Published : 2016-06-25 21:59
Updated : 2024-02-04 18:53
NVD link : CVE-2016-4828
Mitre link : CVE-2016-4828
CVE.ORG link : CVE-2016-4828
JSON object : View
Products Affected
collne
- welcart_e-commerce
CWE
CWE-19
Data Processing Errors