CVEDB API

A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 47.9%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2018-16483

Express-Cart Project » Express-Cart » Version: 0.0.1

cpe:2.3:a:express-cart_project:express-cart:0.0.1
Express-Cart Project » Express-Cart » Version: 1.0.1

cpe:2.3:a:express-cart_project:express-cart:1.0.1
Express-Cart Project » Express-Cart » Version: 1.1.1

cpe:2.3:a:express-cart_project:express-cart:1.1.1
Express-Cart Project » Express-Cart » Version: 1.1.2

cpe:2.3:a:express-cart_project:express-cart:1.1.2
Express-Cart Project » Express-Cart » Version: 1.1.3

cpe:2.3:a:express-cart_project:express-cart:1.1.3
Express-Cart Project » Express-Cart » Version: 1.1.4

cpe:2.3:a:express-cart_project:express-cart:1.1.4
Express-Cart Project » Express-Cart » Version: 1.1.5

cpe:2.3:a:express-cart_project:express-cart:1.1.5