CVE-2025-47272 PhoenixCart Vulnerable to Account Deletion Without Password Confirmation

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication. An attacker with temporary access to an authenticated session e.g., on a shared/public machine could...

CVE-2025-47272

CVE-2025-47272 affects CE Phoenix eCommerce (PhoenixCart) platforms versions 1.0.9.7 through 1.1.0.3, where logged-in users could delete their accounts without password re-authentication (session-based acceptance). Root cause: lack of re-auth for account deletion. Impact: potential permanent acco...

The vulnerability in the software for e-commerce solutions called CE Phoenix (CE PhoenixCart), which allows a hacker to execute arbitrary code.

The vulnerability in the software for electronic commerce, CE Phoenix CE PhoenixCart, involves incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...