CVE-2023-43610
Assigner: jpcert
Published: 2023-09-26T08:19:11.405Z
State: PUBLISHED
affected: vendor: Collne Inc.
product: Welcart e-Commerce
versions: version: versions 2.7 to 2.8.21
status: affected
descriptions: value: SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations.
problemTypes: descriptions: description: SQL Injection
type: text