Cs Cart · Cs-Cart Japanese Edition · CVE-2017-2139
**Name of the Vulnerable Software and Affected Versions**
CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3)
CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3)
**Description**
The issue allows remote attackers to bypass access restrictions and obtain customer information. This is achieved via the orders.pre.php file.
**Recommendations**
For CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3), restrict access to the orders.pre.php file until a fix is available.
For CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3), restrict access to the orders.pre.php file until a fix is available.