CVE-2020-19778

Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "userid" in the HTML request...

CVE-2020-19778

Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "userid" in the HTML request...

CVE-2020-19778

ShopXO CVE-2020-19778 affects v1.4.0–v1.5.0 and is due to Incorrect Access Control. An attacker can gain privileges by manipulating the user_id parameter in the HTML request to /index.php. The issue is documented with high severity (CVSS v3.1 base score 9.8, CRITICAL) and involves remote, unauthe...