Security Advisory

CVE-2023-43610

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-09-26 08:19:11
Last updated 2024-09-24 14:28:26
Assigner jpcert
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations.