Authorization Bypass in EC-CUBE and EC-Orange Platforms

CVE-2014-0808

What is CVE-2014-0808?

An authorization bypass vulnerability exists in EC-CUBE versions 2.11.0 to 2.12.2 and EC-Orange systems released before June 29, 2015. Attackers can exploit this weakness by sending crafted HTTP requests, allowing them unauthorized access to sensitive user information stored on affected shopping platforms. This compromise can lead to the exposure of personal data, underscoring the importance of immediate security updates to mitigate potential risks.

References