PT-2016-6171 · Collne · Collne Welcart E-Commerce Plugin

Gen Sato · Published 2016-06-25 · Updated 2021-09-09 · CVE-2016-4828

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Collne Welcart e-Commerce plugin versions prior to 1.8.3

Description The issue is related to the mishandling of sessions, allowing remote attackers to gain access by using the knowledge of the e-mail address associated with an account.

Recommendations For versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2016-4828

Affected Products

Collne Welcart E-Commerce Plugin

References · 5

• https://osv.dev/vulnerability/CVE-2016-4828 · Vendor Advisory
• http://welcart.com/community/archives/78977 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4828 · Security Note
• http://jvn.jp/en/jp/JVN61578437/index.html · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118 · Vendor Advisory