CVE-2020-8889 - The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information (via action=export) because a typo results in a successful comparison of a blank password and NULL

Back Back to CVE browser

HIGH

The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information (via action=export) because a typo results in a successful comparison of a blank password and NULL

Published Mar 28, 2023

7.5

HIGH

CVSS 3.1

EPSS 1.00%

Description

The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information (via action=export) because a typo results in a successful comparison of a blank password and NULL.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29730
Advisory
https://www.jerdiggity.com/node/869
ExploitThird Party Advisory
https://www.jerdiggity.com/node/871
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29730		Advisory
https://www.jerdiggity.com/node/869		ExploitThird Party Advisory
https://www.jerdiggity.com/node/871		ExploitThird Party Advisory