CVE-2021-34645 – Alert Detail – Security Database

ByPR 24

Executive Summary

Informations
Name CVE-2021-34645 First vendor Publication 2021-08-19
Vendor Cve Last vendor Modification 2021-08-19

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.1.0.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34645

Sources (Detail)

Alert History

If you want to see full details history, please login or register.

0

Date Informations
2021-08-19 21:23:09

Similar Posts

Researchers Link CryptoCore Attacks On Cryptocurrency Exchanges to North Korea

Researchers Link CryptoCore Attacks On Cryptocurrency Exchanges to North Korea

ByPR 24

State-sponsored hackers affiliated with North Korea have been behind a slew of attacks on cryptocurrency exchanges over the past three years, new evidence has revealed. Attributing the attack with “medium-high” likelihood to the Lazarus Group (aka APT38 or Hidden Cobra), researchers from Israeli cybersecurity firm ClearSky said the campaign, dubbed “CryptoCore,” targeted crypto exchanges in…

Accenture knew about ransomware attack in late July: report – Security

Accenture knew about ransomware attack in late July: report – Security

ByPR 24

Accenture spotted the LockBit ransomware attack on its systems as far back as July 30 and found that hackers had stolen documents referencing clients, as well as work materials created on clients’ behalf, according to a report from cybersecurity news site CyberScoop. The publicly traded IT consultancy initially confirmed the ransomware attack on Wednesday in…

Hackers increasingly using web shells to steal credit cards

Hackers increasingly using web shells to steal credit cards

ByPR 24

Global payments processor VISA warns that threat actors are increasingly deploying web shells on compromised servers to exfiltrate credit card information stolen from online store customers. Web shells are tools (scripts or programs) deployed by threat actors to gain and/or maintain access to hacked servers, remotely execute arbitrary code or commands, move laterally within a target’s…

Feds Charge Verkada Camera Hacker With ‘Theft and Fraud’

Feds Charge Verkada Camera Hacker With ‘Theft and Fraud’

ByPR 24

Application Security , Cybercrime , Device Identification Swiss Citizen Allegedly Leaked Victims’ Stolen Data, Including Source Code Jeremy Kirk (jeremy_kirk) , Mathew J. Schwartz (euroinfosec) • March 19, 2021     A Swiss national who recently highlighted flaws in internet-connected Verkada surveillance cameras has been charged with hacking. See Also: Live Webinar | Mitigating the…

Pegasus Project – how governments use Pegasus spyware against journalists

Pegasus Project – how governments use Pegasus spyware against journalists

ByPR 24

Pegasus Project – how governments use Pegasus spyware against journalists | IT Security News 19. July 2021 This article has been indexed from Security Affairs Pegasus Project investigation into the leak of 50,000 phone numbers of potential surveillance targets revealed the abuse of NSO Group’s spyware. Pegasus Project is the name of a large-scale investigation…