Approved changes feed: RSS · Atom

cpe:2.3:a:frogman_office_inc.:cs-cart_multivendor_japanese_edition:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFrogman Office Inc. (24f6cc40-b93d-5317-8001-9b792da79325)
ProductCs Cart Multivendor Japanese Edition (1ea03a6b-739a-5281-aafe-56ff61c83738)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-2143 vulnerable 2026-06-08 05:09:23.676623 Details available
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php.
Published: 2017-04-28T16:00:00.000Z
Updated: 2024-08-05T13:48:03.502Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2139 vulnerable 2026-06-08 05:09:23.670624 Details available
CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to bypass access restriction to obtain customer information via orders.pre.php.
Published: 2017-04-28T16:00:00.000Z
Updated: 2024-08-05T13:39:32.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2138 vulnerable 2026-06-08 05:09:23.668906 Details available
Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Published: 2017-08-02T16:00:00.000Z
Updated: 2024-08-05T13:39:32.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10886 vulnerable 2026-06-08 05:08:36.458775 Details available
Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Published: 2017-11-17T14:00:00.000Z
Updated: 2024-08-05T17:50:12.728Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.