CVE-2014-5516

Cross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request.

• CWE-352

• http://packetstormsecurity.com/files/128342/KonaKart-Storefront-Application-Cross-Site-Request-Forgery.htmlThird Party Advisory, VDB Entry
• http://www.christian-schneider.net/advisories/CVE-2014-5516.txtThird Party Advisory
• http://www.konakart.com/downloads/ver-7-3-0-0-whats-newRelease Notes, Vendor Advisory
• http://packetstormsecurity.com/files/128342/KonaKart-Storefront-Application-Cross-Site-Request-Forgery.htmlThird Party Advisory, VDB Entry
• http://www.christian-schneider.net/advisories/CVE-2014-5516.txtThird Party Advisory
• http://www.konakart.com/downloads/ver-7-3-0-0-whats-newRelease Notes, Vendor Advisory

Published

Jan 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-5504SolarWinds Log and Event Manager before 6.0 uses "static" cr…
• CVE-2014-5505Stack-based buffer overflow in SAP Crystal Reports allows re…
• CVE-2014-5506Double free vulnerability in SAP Crystal Reports allows remo…
• CVE-2014-5507iBackup 10.0.0.32 and earlier uses weak permissions (Everyon…
• CVE-2014-5508Multiple integer overflows in the HelpServ module (mod-helps…
• CVE-2014-5509clipedit in the Clipboard module for Perl allows local users…
• CVE-2014-5519The Ploticus module in PhpWiki 1.5.0 allows remote attackers…
• CVE-2014-5520SQL injection vulnerability in XRMS CRM, possibly 1.99.2, al…
• CVE-2014-5521plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.…
• CVE-2014-5522Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-5523Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-5524The Adcolony library for Android does not verify X.509 certi…