VULNERABILITY INTELLIGENCE

CVE-2015-0951

CVSS score6.5 MEDIUM

EPSS probability1.25%

CISA KEVNot currently listed

Published2015-04-05

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2) remove request.

Primary references

cret@cert.org — Third Party Advisory, US Government Resource
cret@cert.org — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory