Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Konakart Component: Konakart Clear all filters
TI-2014-04478 CVE-2014-5516 · GHSA-j3pw-rgxx-2h5v

Cross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a u…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01302 Published 2020-01-03 No fix listed CWE-352
TI-2017-12559 CVE-2017-17108 · GHSA-567f-r62w-x6ch

Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform…

Priority MEDIUM 46

Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to download system files, as well as upload specially crafted JSP files and in turn…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02154 Published 2018-02-03 No fix listed CWE-22