description: CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php.
problem types: Fails to restrict access
affected:
{
product: CS-Cart Japanese Edition
vendor: Frogman Office Inc.
versions:
status: affected, version: v4.3.10-jp-1 and earlier
}
{
product: CS-Cart Multivendor Japanese Edition
vendor: Frogman Office Inc.
versions:
status: affected, version: v4.3.10-jp-1 and earlier
}
