MEDIUM🇵🇱 Wersja polska

CVE-2024-6128

CVSS 6.9v4.0pub. 2024-06-18upd. 2024-11-21

A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unknown processing of the file /checkout of the component Checkout Page. The manipulation of the argument quantity with the input -10 leads to enforcement of behavioral workflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268895.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Spa Cart Spa Cartcms

    APP
    Spa-Cart
    1.9.0.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-6129MEDIUM6.3ten sam produkt

A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown...

CVE-2023-43148HIGH8.1ten sam vendor

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete...

CVE-2023-43149HIGH8.8ten sam vendor

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an ad...

CVE-2023-4548MEDIUM6.3ten sam vendor

A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unkno...

CVE-2023-4547LOW3.5ten sam vendor

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by thi...