Description
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_misc
http://tips.cs-cart.jp/fix-jvn-25598952.html
Third Party Advisory, VDB Entry third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN25598952/index.html
Scores
CVSS v3
5.3
EPSS
0.0107
EPSS Percentile
60.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Details
CWE
CWE-425
Status
published
Products (4)
Frogman Office Inc./CS-Cart Japanese Edition
v4.3.10-jp-1 and earlier
Frogman Office Inc./CS-Cart Multivendor Japanese Edition
v4.3.10-jp-1 and earlier
frogman_office_inc/cs-cart_japanese_edition
4.3.10-jp-1
frogman_office_inc/cs-cart_multivendor_japanese_edition
4.3.10-jp-1
Published
Apr 28, 2017
Tracked Since
Feb 18, 2026