CVEDB API

expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.2%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2018-12457

Expresscart Project » Expresscart » Version: 0.0.1

cpe:2.3:a:expresscart_project:expresscart:0.0.1
Expresscart Project » Expresscart » Version: 1.0.1

cpe:2.3:a:expresscart_project:expresscart:1.0.1
Expresscart Project » Expresscart » Version: 1.1.1

cpe:2.3:a:expresscart_project:expresscart:1.1.1
Expresscart Project » Expresscart » Version: 1.1.2

cpe:2.3:a:expresscart_project:expresscart:1.1.2
Expresscart Project » Expresscart » Version: 1.1.3

cpe:2.3:a:expresscart_project:expresscart:1.1.3
Expresscart Project » Expresscart » Version: 1.1.4

cpe:2.3:a:expresscart_project:expresscart:1.1.4
Expresscart Project » Expresscart » Version: 1.1.5

cpe:2.3:a:expresscart_project:expresscart:1.1.5