CVE 描述
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Cross-Site Request Forgery The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
指标
| 指标 | 评分 | 严重程度 | CVSS 向量 | 来源 |
|---|---|---|---|---|
| V2 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSS 评分
EPSS 百分位
漏洞利用信息
Exploit Database EDB-ID : 28959
发布日期 : 2013-10-13 22h00 +00:00
作者 : absane
EDB 已验证 : Yes
相关产品
配置 0
Cart66>>Cart66_lite_plugin >> Version 至（含） 1.5.1.14
Cart66>>Cart66_lite_plugin >> Version 1.0.7
Cart66>>Cart66_lite_plugin >> Version 1.0.8
Cart66>>Cart66_lite_plugin >> Version 1.1
Cart66>>Cart66_lite_plugin >> Version 1.1.1
Cart66>>Cart66_lite_plugin >> Version 1.1.2
Cart66>>Cart66_lite_plugin >> Version 1.1.3
Cart66>>Cart66_lite_plugin >> Version 1.1.4
Cart66>>Cart66_lite_plugin >> Version 1.1.5
Cart66>>Cart66_lite_plugin >> Version 1.1.6
Cart66>>Cart66_lite_plugin >> Version 1.3.0
Cart66>>Cart66_lite_plugin >> Version 1.4.0
Cart66>>Cart66_lite_plugin >> Version 1.4.1
Cart66>>Cart66_lite_plugin >> Version 1.4.2
Cart66>>Cart66_lite_plugin >> Version 1.4.4
Cart66>>Cart66_lite_plugin >> Version 1.4.7
Cart66>>Cart66_lite_plugin >> Version 1.4.8
Cart66>>Cart66_lite_plugin >> Version 1.4.9
Cart66>>Cart66_lite_plugin >> Version 1.5.0
Cart66>>Cart66_lite_plugin >> Version 1.5.0.1
Cart66>>Cart66_lite_plugin >> Version 1.5.0.2
Cart66>>Cart66_lite_plugin >> Version 1.5.1
Cart66>>Cart66_lite_plugin >> Version 1.5.1.1
Cart66>>Cart66_lite_plugin >> Version 1.5.1.2
Cart66>>Cart66_lite_plugin >> Version 1.5.1.8
参考资料
Tags : mailing-list, x_refsource_BUGTRAQ
Tags : x_refsource_MISC
