AI Score
Confidence
High
EPSS
Percentile
74.2%
Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter to shop/profile/register.action.
seclists.org/fulldisclosure/2014/Jul/38
www.securityfocus.com/archive/1/532726/100/0/threaded