CVE-2014-4963: Undefined Security Weakness

Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter to shop/profile/register.action...

PT-2014-6233

Name of the Vulnerable Software and Affected Versions Shopizer versions 1.1.5 and earlier Description The issue allows remote attackers to modify the account settings of arbitrary users. This is achieved via the customer.customerId parameter to the "shop/profile/register.action" endpoint...