CVE-2014-4964

Multiple cross-site request forgery CSRF vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authentication of users for requests that 1 modify customer settings or hijack the authentication of administrators for requests that change 2 customer passwords, 3 shop...

CVE-2014-4964

Multiple cross-site request forgery CSRF vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authentication of users for requests that 1 modify customer settings or hijack the authentication of administrators for requests that change 2 customer passwords, 3 shop...

PT-2014-6234

Name of the Vulnerable Software and Affected Versions Shopizer versions 1.1.5 and earlier Description The issue allows remote attackers to hijack user authentication for various requests, including modifying customer settings, changing customer passwords, altering shop configuration, and modifyin...