CVE-2023-43610 — Collne Inc. / Welcart e-Commerce

CVE-2023-43610

Collne Inc. / Welcart e-Commerce PUBLISHED

Description (CNA)

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations.

Affected (CNA)

Vendor / product	Versions
Collne Inc. / Welcart e-Commerce	affected versions 2.7 to 2.8.21

CWE

No CWE identifiers supplied.

References

https://www.welcart.com/archives/20106.html
https://jvn.jp/en/jp/JVN97197972/

ADP enrichment

CVE

No English description supplied.

https://www.welcart.com/archives/20106.html
https://jvn.jp/en/jp/JVN97197972/

CISA-ADP

No English description supplied.

No references supplied.