cleantalk
Vulnerabilities and Security Researches

Welcart e-Commerce, CVE-2016-4828

CVE, Research URL

CVE-2016-4828

Application

Welcart e-Commerce

Published on
Jun 26, 2016
Research Description
The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.
Affected versions
Min -, max 1.8.3.
Status
vulnerable