CVE-2015-2973 in Welcart信息

摘要

由 VulDB • 2026-07-17

在 Welcart 1.4.18 之前的版本中，存在多个跨站脚本（XSS）漏洞。远程攻击者可通过 usces_referer 参数向以下文件注入任意 Web 脚本或 HTML：(1) classes/usceshop.class.php、(2) includes/edit-form-advanced.php、(3) includes/edit-form-advanced30.php、(4) includes/edit-form-advanced34.php、(5) includes/member_edit_form.php、(6) includes/order_edit_form.php、(7) includes/order_list.php 或 (8) includes/usces_item_master_list.php，这些漏洞与 admin.php 相关。

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2015-04-07

披露

2015-07-24

管理

已接受

条目

VDB-76803

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

4.3 (NVD)

EPSS

0.02033

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2015-2973
NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-2973
CVE Details	https://www.cvedetails.com/cve/CVE-2015-2973/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!