← All advisories

Medium severity6.1NVD Advisory· Published Jun 30, 2019· Updated Jun 17, 2026

CVE-2018-20849

CVE-2018-20849

Description

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.

Affected products

3

Arastta/eCommerce2 versions
cpe:2.3:a:arastta:ecommerce:1.6.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:arastta:ecommerce:1.6.2:*:*:*:*:*:*:*
- (no CPE)range: 1.6.2
Arastta/Arastta eCommercedescription

Patches

Vulnerability mechanics

References

1

packetstormsecurity.com/files/147470/Arastta-1.6.2-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.