Nixon-H/Ecommerce-IDOR-Product-Manipulation

Nixon-H/Ecommerce-IDOR-Product-Manipulation

GitHubGitHub
GitHubgithub.com
Releases0
A High-severity (8.1) IDOR flaw in product management. The backend fails to verify record ownership during SQL updates/deletes. Any authenticated seller can modify or delete products belonging to others by manipulating the id parameter, enabling financial fraud and catalog deletion.
Log in to subscribe
Subscribe above to receive notifications when new versions are released.
VersionDate
Stability
Stability is determined by the version string and my be inaccurate.
PreviousNext