Hackerwahab

**Name of the Vulnerable Software and Affected Versions** CS Cart version 4.18.3 **Description** CS Cart is susceptible to an Insecure Direct Object Reference (IDOR) issue. The user profile functionality does not properly validate server-side operations when enabling or disabling stickers. An authenticated user can manipulate requests to affect other users' accounts by modifying object identifiers, such as the `company id` parameter. **Recommendations** Ensure proper validation of the `company id` parameter and other object identifiers on the server side to prevent unauthorized access and modification of user data.

**Name of the Vulnerable Software and Affected Versions** CS Cart version 4.18.3 **Description** A Cross Site Request Forgery (CSRF) issue exists in CS Cart. Attackers can add products to a user's comparison list by sending a specially crafted HTTP request. **Recommendations** Update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** CS Cart version 4.18.3 **Description** The vendor login functionality lacks essential security controls, such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and passwords (brute-force attack) to gain unauthorized access to vendor accounts. The absence of any blocking mechanism makes the login endpoint susceptible to automated attacks. **Recommendations** Implement CAPTCHA verification on the vendor login endpoint. Implement rate limiting on the vendor login endpoint.

**Name of the Vulnerable Software and Affected Versions** CS Cart version 4.18.3 **Description** A file upload vulnerability exists that allows attackers to execute arbitrary code. The software allows unrestricted upload of HTML files, which are rendered directly in the browser when accessed. This enables an attacker to upload a crafted HTML file containing malicious content, such as a fake login form for credential harvesting or scripts for Cross-Site Scripting (XSS) attacks. Serving content from a trusted domain increases the likelihood of successful phishing or script execution against other users. **Recommendations** Restrict file uploads to only necessary file types and thoroughly validate all uploaded files to prevent the execution of malicious code.