Skip to content

CVE-2014-4963 Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter to shop/profile/register.action.

MediumCVSS 6.8 EPSS 3.7%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter to shop/profile/register.action.

Affected products

ProductAffected versionsFixed in
shopizer <= 1.1.5 No fix listed

References