High severity7.5NVD Advisory· Published Mar 28, 2023· Updated Jun 17, 2026
CVE-2020-8889
CVE-2020-8889
Description
The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information (via action=export) because a typo results in a successful comparison of a blank password and NULL.
Affected products
3- cpe:2.3:a:shipstation:shipstation:1.0:*:*:*:*:cs-cart:*:*
- CS-Cart/ShipStation.com plugindescription
- Range: 1.0
Patches
Vulnerability mechanics
References
2- www.jerdiggity.com/node/869nvdExploitThird Party Advisory
- www.jerdiggity.com/node/871nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.