| Package | Affected versions | Patched versions |
|---|---|---|
| mall | ≤ 1.0.3 |
A vulnerability was detected in macrozheng mall up to 1.0.3. Affected by this issue is the function delete of the file /member/readHistory/delete. Performing manipulation of the argument ids results in improper access controls. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free