critical9.8
CVE-2020-19778
Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "user_id" in the …
Impact
Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "user_id" in the HTML request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shopxo | Shopxo | Versions 1.4.0, 1.5.0 |