CVE-2020-12101 - CVE House
Back to Database
Status published Medium CVE-2020-12101

The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote...

Vulnerability Description

The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id field in the POST request for altering an address.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12101

Credits & Attribution

No credits recorded in the NVD database.

References

More from xt-commerce

View All →
CVE-2011-5011
Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1...
Medium 6.8
CVE-2008-6304
SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magic_quotes_gpc...
Medium 6.8
CVE-2008-6045
Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier...
Medium 6.8
CVE-2008-6044
Cross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and...
Medium 4.3
CVE-2007-1126
Directory traversal vulnerability in index.php in xtcommerce allows remote attackers...
Medium 5

Affected Vendor

xt-commerce

View all reports →

Affected Software

xt-commerce
Vulnerable Versions:
5.1.0

Timeline

Official Publish: April 30th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.