Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35395
HistoryMay 05, 2022 - 12:44 p.m.

Improper Access Control

2022-05-0512:44:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
shopxo
vulnerability
add function
database injection
modification

EPSS

0.002

Percentile

64.9%

shopxo/shopxo is vulnerable to improper access control. The vulnerability exists in Add function in Index.php because it doesn’t validate visitors and existing databases which allows an attacker to inject and modify the original data in the database.

EPSS

0.002

Percentile

64.9%

Related for VERACODE:35395