Medium severity5.3NVD Advisory· Published Apr 28, 2017· Updated May 13, 2026
CVE-2017-2143
CVE-2017-2143
Description
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php.
Affected products
3- cpe:2.3:a:frogman_office_inc:cs-cart_japanese_edition:4.3.10-jp-1:*:*:*:*:*:*:*
- cpe:2.3:a:frogman_office_inc:cs-cart_multivendor_japanese_edition:4.3.10-jp-1:*:*:*:*:*:*:*
- Range: v4.3.10-jp-1 and earlier
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- tips.cs-cart.jp/fix-jvn-25598952.htmlnvdPatchVendor Advisory
- jvn.jp/en/jp/JVN25598952/index.htmlnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.