E-commerce vulnerabilities
3 known vulnerabilities in E-commerce from Detronetdip. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
E-commerce: Authorization Bypass Through User-Controlled Key
A security flaw has been discovered in detronetdip E-commerce 1.0.0. The impacted element is the function Delete/Update of the component Product Management Module. Performing a manipulation of the argument ID results in authorization bypass. Remote exploitatio
- 9.8 Critical severity
E-commerce: Missing Authentication for Critical Functionality
A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/add_seller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missi
- 9.8 Critical severity
E-commerce: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some unknown processing of the file /seller/assets/backend/profile/addadhar.php. Performing a manipulation of the argument File results in unrestricted upload. Remote explo