Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Hitshop Project Subscribe
Filtered by product Hitshop
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-19853 1 Hitshop Project 1 Hitshop 2019-10-02 6.5 MEDIUM 8.8 HIGH
An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability (that allows control over the whole web site) via the admin.php/user/add URI because a storekeeper account (which is supposed to have only privileges for commodity management) can add an administrator account.