Vulnerabilities > CVE-2022-4236 - Files or Directories Accessible to External Parties vulnerability in Collne Welcart E-Commerce

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

collne

CWE-552

NVD

Published: 2023-01-02

Updated: 2023-11-07

Summary

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server.

Vulnerable Configurations

Part	Description	Count
Application	Collne Collne Welcart E Commerce - Collne Welcart E Commerce 0.7 Collne Welcart E Commerce 0.7.1 Collne Welcart E Commerce 0.7.2 Collne Welcart E Commerce 0.7.3 Collne Welcart E Commerce 0.8 Collne Welcart E Commerce 0.8.1 Collne Welcart E Commerce 0.9 Collne Welcart E Commerce 0.9.1 Collne Welcart E Commerce 0.9.2 Collne Welcart E Commerce 0.9.3 Collne Welcart E Commerce 0.9.4 Collne Welcart E Commerce 0.9.5 Collne Welcart E Commerce 1.0 Collne Welcart E Commerce 1.0.1 Collne Welcart E Commerce 1.0.2 Collne Welcart E Commerce 1.0.3 Collne Welcart E Commerce 1.0.4 Collne Welcart E Commerce 1.0.5 Collne Welcart E Commerce 1.0.6 Collne Welcart E Commerce 1.0.7 Collne Welcart E Commerce 1.0.8 Collne Welcart E Commerce 1.0.9 Collne Welcart E Commerce 1.0.10 Collne Welcart E Commerce 1.0.11 Collne Welcart E Commerce 1.1.0 Collne Welcart E Commerce 1.1.1 Collne Welcart E Commerce 1.1.2 Collne Welcart E Commerce 1.1.3 Collne Welcart E Commerce 1.1.4 Collne Welcart E Commerce 1.1.5 Collne Welcart E Commerce 1.1.6 Collne Welcart E Commerce 1.1.7 Collne Welcart E Commerce 1.1.8 Collne Welcart E Commerce 1.1.9 Collne Welcart E Commerce 1.1.10 Collne Welcart E Commerce 1.2 Collne Welcart E Commerce 1.2.1 Collne Welcart E Commerce 1.2.2 Collne Welcart E Commerce 1.2.3 Collne Welcart E Commerce 1.3 Collne Welcart E Commerce 1.3.1 Collne Welcart E Commerce 1.3.2 Collne Welcart E Commerce 1.3.3 Collne Welcart E Commerce 1.3.4 Collne Welcart E Commerce 1.3.5 Collne Welcart E Commerce 1.3.6 Collne Welcart E Commerce 1.3.7 Collne Welcart E Commerce 1.3.8 Collne Welcart E Commerce 1.3.9 Collne Welcart E Commerce 1.3.10 Collne Welcart E Commerce 1.3.10.2 Collne Welcart E Commerce 1.3.11 Collne Welcart E Commerce 1.3.12 Collne Welcart E Commerce 1.3.13 Collne Welcart E Commerce 1.3.14 Collne Welcart E Commerce 1.3.15 Collne Welcart E Commerce 1.3.16 Collne Welcart E Commerce 1.3.17 Collne Welcart E Commerce 1.4.0 Collne Welcart E Commerce 1.4.1 Collne Welcart E Commerce 1.4.2 Collne Welcart E Commerce 1.4.3 Collne Welcart E Commerce 1.4.4 Collne Welcart E Commerce 1.4.5 Collne Welcart E Commerce 1.4.6 Collne Welcart E Commerce 1.4.7 Collne Welcart E Commerce 1.4.8 Collne Welcart E Commerce 1.4.9 Collne Welcart E Commerce 1.4.10 Collne Welcart E Commerce 1.4.11 Collne Welcart E Commerce 1.4.12 Collne Welcart E Commerce 1.4.13 Collne Welcart E Commerce 1.4.14 Collne Welcart E Commerce 1.4.15 Collne Welcart E Commerce 1.4.16 Collne Welcart E Commerce 1.4.17 Collne Welcart E Commerce 1.4.18 Collne Welcart E Commerce 1.4.19 Collne Welcart E Commerce 1.4.20 Collne Welcart E Commerce 1.4.21 Collne Welcart E Commerce 1.5 Collne Welcart E Commerce 1.5.1 Collne Welcart E Commerce 1.5.2 Collne Welcart E Commerce 1.5.3 Collne Welcart E Commerce 1.5.4 Collne Welcart E Commerce 1.6 Collne Welcart E Commerce 1.6.1 Collne Welcart E Commerce 1.6.2 Collne Welcart E Commerce 1.6.3 Collne Welcart E Commerce 1.6.4 Collne Welcart E Commerce 1.6.5 Collne Welcart E Commerce 1.6.6 Collne Welcart E Commerce 1.7.0 Collne Welcart E Commerce 1.7.1 Collne Welcart E Commerce 1.7.2 Collne Welcart E Commerce 1.7.3 Collne Welcart E Commerce 1.7.4 Collne Welcart E Commerce 1.7.5 Collne Welcart E Commerce 1.8.0 Collne Welcart E Commerce 1.8.1 Collne Welcart E Commerce 1.8.2 Collne Welcart E Commerce 1.8.3 Collne Welcart E Commerce 1.8.4 Collne Welcart E Commerce 1.8.5 Collne Welcart E Commerce 1.8.6 Collne Welcart E Commerce 1.8.7 Collne Welcart E Commerce 1.8.8 Collne Welcart E Commerce 1.9.0 Collne Welcart E Commerce 1.9.1 Collne Welcart E Commerce 1.9.2 Collne Welcart E Commerce 1.9.3 Collne Welcart E Commerce 1.9.4 Collne Welcart E Commerce 1.9.5 Collne Welcart E Commerce 1.9.6 Collne Welcart E Commerce 1.9.7 Collne Welcart E Commerce 1.9.8 Collne Welcart E Commerce 1.9.9 Collne Welcart E Commerce 1.9.10 Collne Welcart E Commerce 1.9.11 Collne Welcart E Commerce 1.9.13 Collne Welcart E Commerce 1.9.14 Collne Welcart E Commerce 1.9.15 Collne Welcart E Commerce 1.9.16 Collne Welcart E Commerce 1.9.17 Collne Welcart E Commerce 1.9.18 Collne Welcart E Commerce 1.9.19 Collne Welcart E Commerce 1.9.20 Collne Welcart E Commerce 1.9.21 Collne Welcart E Commerce 1.9.22 Collne Welcart E Commerce 1.9.23 Collne Welcart E Commerce 1.9.24 Collne Welcart E Commerce 1.9.25 Collne Welcart E Commerce 1.9.26 Collne Welcart E Commerce 1.9.27 Collne Welcart E Commerce 1.9.28 Collne Welcart E Commerce 1.9.29 Collne Welcart E Commerce 1.9.30 Collne Welcart E Commerce 1.9.31 Collne Welcart E Commerce 1.9.32 Collne Welcart E Commerce 1.9.33 Collne Welcart E Commerce 1.9.34 Collne Welcart E Commerce 1.9.35 Collne Welcart E Commerce 1.9.36 Collne Welcart E Commerce 1.9.37 Collne Welcart E Commerce 2.0.0 Collne Welcart E Commerce 2.0.1 Collne Welcart E Commerce 2.1.0 Collne Welcart E Commerce 2.1.1 Collne Welcart E Commerce 2.1.2 Collne Welcart E Commerce 2.1.3 Collne Welcart E Commerce 2.1.4 Collne Welcart E Commerce 2.1.5 Collne Welcart E Commerce 2.1.6 Collne Welcart E Commerce 2.1.7 Collne Welcart E Commerce 2.1.8 Collne Welcart E Commerce 2.2.0 Collne Welcart E Commerce 2.2.1 Collne Welcart E Commerce 2.2.2 Collne Welcart E Commerce 2.2.3 Collne Welcart E Commerce 2.2.4 Collne Welcart E Commerce 2.2.5 Collne Welcart E Commerce 2.2.6 Collne Welcart E Commerce 2.2.7 Collne Welcart E Commerce 2.2.8 Collne Welcart E Commerce 2.3.0 Collne Welcart E Commerce 2.3.1 Collne Welcart E Commerce 2.3.2 Collne Welcart E Commerce 2.3.3 Collne Welcart E Commerce 2.3.4 Collne Welcart E Commerce 2.3.5 Collne Welcart E Commerce 2.4 Collne Welcart E Commerce 2.4.1 Collne Welcart E Commerce 2.4.2 Collne Welcart E Commerce 2.5.0 Collne Welcart E Commerce 2.5.2 Collne Welcart E Commerce 2.5.3 Collne Welcart E Commerce 2.5.4 Collne Welcart E Commerce 2.5.5 Collne Welcart E Commerce 2.5.7 Collne Welcart E Commerce 2.5.8 Collne Welcart E Commerce 2.6 Collne Welcart E Commerce 2.6.1 Collne Welcart E Commerce 2.6.2 Collne Welcart E Commerce 2.6.3 Collne Welcart E Commerce 2.6.4 Collne Welcart E Commerce 2.6.5 Collne Welcart E Commerce 2.6.7 Collne Welcart E Commerce 2.6.8 Collne Welcart E Commerce 2.6.9 Collne Welcart E Commerce 2.6.10 Collne Welcart E Commerce 2.6.11 Collne Welcart E Commerce 2.7 Collne Welcart E Commerce 2.7.1 Collne Welcart E Commerce 2.7.2 Collne Welcart E Commerce 2.7.3 Collne Welcart E Commerce 2.7.4 Collne Welcart E Commerce 2.7.5 Collne Welcart E Commerce 2.7.6 Collne Welcart E Commerce 2.7.7 Collne Welcart E Commerce 2.7.8 Collne Welcart E Commerce 2.8 Collne Welcart E Commerce 2.8.1 Collne Welcart E Commerce 2.8.2 Collne Welcart E Commerce 2.8.3 Collne Welcart E Commerce 2.8.4	206

Common Weakness Enumeration (CWE)

CWE-552 - Files or Directories Accessible to External Parties

References

https://wpscan.com/vulnerability/436d8894-dab8-41ea-8ed0-a3338aded635