Expresscart Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Expresscart Project records in CISA KEV

No Expresscart Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2018-08943 CVE-2018-12457 · GHSA-hr89-w7p6-pjmq

MEDIUM 42

expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01889 Published 2018-06-15 Fixed in 1.1.6 CWE-732