CVE-2018-12457

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
6.5
MEDIUM
Affected
2
PROJECTS

Description

expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header.

express-cart
express-cart
A fully functioning Node.js shopping cart with Stripe, PayPal and Authorize.net payments.
NPMNPM
mrvautin/expressCart
mrvautin/expressCart
A fully functioning Node.js shopping cart with Stripe, PayPal, Authorize.net, PayWay, Blockonomics, Adyen, Zip and Instore payments.
GitHubGitHub
2.26K