EUVD-2018-11528

Malware in sbrugna...

CVE-2018-19853

An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability that allows control over the whole web site via the admin.php/user/add URI because a storekeeper account which is supposed to have only privileges for commodity management can add an...

Hitshop Elevation of Privilege Vulnerability

hitshop is an online shopping mall system. A power-up vulnerability exists in hitshop 2014-07-15 and earlier versions, which stems from the ability to add an administrator account to the storekeeper account. The vulnerability can be exploited by an attacker to take control of the entire website...