PT-2025-31549 · Cs Cart · Cs-Cart

Hackerwahab · Published 2025-07-31 · Updated 2025-07-31 · CVE-2025-50849

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CS Cart version 4.18.3

Description CS Cart is susceptible to an Insecure Direct Object Reference (IDOR) issue. The user profile functionality does not properly validate server-side operations when enabling or disabling stickers. An authenticated user can manipulate requests to affect other users' accounts by modifying object identifiers, such as the company id parameter.

Recommendations Ensure proper validation of the company id parameter and other object identifiers on the server side to prevent unauthorized access and modification of user data.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-50849

Affected Products

Cs-Cart

References · 6

• 🔥 https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50849.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-50849 · Security Note
• https://twitter.com/CVEnew/status/1950939123252138158 · Twitter Post
• https://t.me/CVEtracker/28864 · Telegram Post
• https://t.me/cveNotify/130411 · Telegram Post
• http://cs.com · Note