Posted by MustLive on May 15
Hello list!
I want to warn you about SQL Injection, Full path disclosure, Abuse of
Functionality and Insufficient Anti-automation vulnerabilities in Cetera
eCommerce. It's engine for online shops.
————————-
Affected products:
————————-
Vulnerable are Cetera eCommerce 15.0 and previous versions. SQLi and FPD
concern only version 15.0, and AoF and IAA concern version 15.0 and previous
versions. These…
Source: SQLi, FPD, AoF and IAA vulnerabilities in Cetera eCommerce