Lucene search
HistorySep 27, 2023 - 3:19 p.m.
CVE-2023-43493
sql injection
welcart e-commerce
unauthorized access
sensitive data
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.1%
SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information.
Affected configurations
Node
collnewelcart_e-commerceRange2.7–2.8.21wordpress
Related
wpvulndb
wpvulndb
Welcart e-Commerce < 2.8.22 - Author+ SQL Injection
2023-09-28 00:00:00
prion
prion
Sql injection
2023-09-27 15:19:00
cve
cve
CVE-2023-43493
2023-09-27 15:19:34
cvelist
cvelist
CVE-2023-43493
2023-09-26 08:18:24
jvn
jvn
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.1%
Related for NVD:CVE-2023-43493