Vulnerabilities > CVE-2020-28339 - Deserialization of Untrusted Data vulnerability in Collne Welcart E-Commerce

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

collne

CWE-502

NVD

Published: 2020-11-07

Updated: 2021-07-21

Summary

The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object Injection because of usces_unserialize. There is not a complete POP chain.

Vulnerable Configurations

Part	Description	Count
Application	Collne Collne Welcart E Commerce - Collne Welcart E Commerce 0.7 Collne Welcart E Commerce 0.7.1 Collne Welcart E Commerce 0.7.2 Collne Welcart E Commerce 0.7.3 Collne Welcart E Commerce 0.8 Collne Welcart E Commerce 0.8.1 Collne Welcart E Commerce 0.9 Collne Welcart E Commerce 0.9.1 Collne Welcart E Commerce 0.9.2 Collne Welcart E Commerce 0.9.3 Collne Welcart E Commerce 0.9.4 Collne Welcart E Commerce 0.9.5 Collne Welcart E Commerce 1.0 Collne Welcart E Commerce 1.0.1 Collne Welcart E Commerce 1.0.2 Collne Welcart E Commerce 1.0.3 Collne Welcart E Commerce 1.0.4 Collne Welcart E Commerce 1.0.5 Collne Welcart E Commerce 1.0.6 Collne Welcart E Commerce 1.0.7 Collne Welcart E Commerce 1.0.8 Collne Welcart E Commerce 1.0.9 Collne Welcart E Commerce 1.0.10 Collne Welcart E Commerce 1.0.11 Collne Welcart E Commerce 1.1.0 Collne Welcart E Commerce 1.1.1 Collne Welcart E Commerce 1.1.2 Collne Welcart E Commerce 1.1.3 Collne Welcart E Commerce 1.1.4 Collne Welcart E Commerce 1.1.5 Collne Welcart E Commerce 1.1.6 Collne Welcart E Commerce 1.1.7 Collne Welcart E Commerce 1.1.8 Collne Welcart E Commerce 1.1.9 Collne Welcart E Commerce 1.1.10 Collne Welcart E Commerce 1.2 Collne Welcart E Commerce 1.2.1 Collne Welcart E Commerce 1.2.2 Collne Welcart E Commerce 1.2.3 Collne Welcart E Commerce 1.3 Collne Welcart E Commerce 1.3.1 Collne Welcart E Commerce 1.3.2 Collne Welcart E Commerce 1.3.3 Collne Welcart E Commerce 1.3.4 Collne Welcart E Commerce 1.3.5 Collne Welcart E Commerce 1.3.6 Collne Welcart E Commerce 1.3.7 Collne Welcart E Commerce 1.3.8 Collne Welcart E Commerce 1.3.9 Collne Welcart E Commerce 1.3.10 Collne Welcart E Commerce 1.3.10.2 Collne Welcart E Commerce 1.3.11 Collne Welcart E Commerce 1.3.12 Collne Welcart E Commerce 1.3.13 Collne Welcart E Commerce 1.3.14 Collne Welcart E Commerce 1.3.15 Collne Welcart E Commerce 1.3.16 Collne Welcart E Commerce 1.3.17 Collne Welcart E Commerce 1.4.0 Collne Welcart E Commerce 1.4.1 Collne Welcart E Commerce 1.4.2 Collne Welcart E Commerce 1.4.3 Collne Welcart E Commerce 1.4.4 Collne Welcart E Commerce 1.4.5 Collne Welcart E Commerce 1.4.6 Collne Welcart E Commerce 1.4.7 Collne Welcart E Commerce 1.4.8 Collne Welcart E Commerce 1.4.9 Collne Welcart E Commerce 1.4.10 Collne Welcart E Commerce 1.4.11 Collne Welcart E Commerce 1.4.12 Collne Welcart E Commerce 1.4.13 Collne Welcart E Commerce 1.4.14 Collne Welcart E Commerce 1.4.15 Collne Welcart E Commerce 1.4.16 Collne Welcart E Commerce 1.4.17 Collne Welcart E Commerce 1.4.18 Collne Welcart E Commerce 1.4.19 Collne Welcart E Commerce 1.4.20 Collne Welcart E Commerce 1.4.21 Collne Welcart E Commerce 1.5 Collne Welcart E Commerce 1.5.1 Collne Welcart E Commerce 1.5.2 Collne Welcart E Commerce 1.5.3 Collne Welcart E Commerce 1.5.4 Collne Welcart E Commerce 1.6 Collne Welcart E Commerce 1.6.1 Collne Welcart E Commerce 1.6.2 Collne Welcart E Commerce 1.6.3 Collne Welcart E Commerce 1.6.4 Collne Welcart E Commerce 1.6.5 Collne Welcart E Commerce 1.6.6 Collne Welcart E Commerce 1.7.0 Collne Welcart E Commerce 1.7.1 Collne Welcart E Commerce 1.7.2 Collne Welcart E Commerce 1.7.3 Collne Welcart E Commerce 1.7.4 Collne Welcart E Commerce 1.7.5 Collne Welcart E Commerce 1.8.0 Collne Welcart E Commerce 1.8.1 Collne Welcart E Commerce 1.8.2 Collne Welcart E Commerce 1.8.3 Collne Welcart E Commerce 1.8.4 Collne Welcart E Commerce 1.8.5 Collne Welcart E Commerce 1.8.6 Collne Welcart E Commerce 1.8.7 Collne Welcart E Commerce 1.8.8 Collne Welcart E Commerce 1.9.0 Collne Welcart E Commerce 1.9.1 Collne Welcart E Commerce 1.9.2 Collne Welcart E Commerce 1.9.3 Collne Welcart E Commerce 1.9.4 Collne Welcart E Commerce 1.9.5 Collne Welcart E Commerce 1.9.6 Collne Welcart E Commerce 1.9.7 Collne Welcart E Commerce 1.9.8 Collne Welcart E Commerce 1.9.9 Collne Welcart E Commerce 1.9.10 Collne Welcart E Commerce 1.9.11 Collne Welcart E Commerce 1.9.13 Collne Welcart E Commerce 1.9.14 Collne Welcart E Commerce 1.9.15 Collne Welcart E Commerce 1.9.16 Collne Welcart E Commerce 1.9.17 Collne Welcart E Commerce 1.9.18 Collne Welcart E Commerce 1.9.19 Collne Welcart E Commerce 1.9.20 Collne Welcart E Commerce 1.9.21 Collne Welcart E Commerce 1.9.22 Collne Welcart E Commerce 1.9.23 Collne Welcart E Commerce 1.9.24 Collne Welcart E Commerce 1.9.25 Collne Welcart E Commerce 1.9.26 Collne Welcart E Commerce 1.9.27 Collne Welcart E Commerce 1.9.28 Collne Welcart E Commerce 1.9.29 Collne Welcart E Commerce 1.9.30 Collne Welcart E Commerce 1.9.31 Collne Welcart E Commerce 1.9.32 Collne Welcart E Commerce 1.9.33 Collne Welcart E Commerce 1.9.34 Collne Welcart E Commerce 1.9.35	143

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References