Brute Force Vulnerability in Shopizer Webshop by Shopizer
CVE-2014-5385

Currently unrated

Key Information:

Vendor

Shopizer

Status
Shopizer
Vendor
CVE Published:
21 August 2014

What is CVE-2014-5385?

In versions of Shopizer up to 1.1.5, a critical issue exists where the number of authentication attempts is not restricted. This oversight provides an opportunity for remote attackers to exploit the system through brute force attacks, allowing them to easily guess user passwords and potentially gain unauthorized access. The lack of protective measures against multiple consecutive login attempts poses significant security risks.

References

http://www.securityfocus.com/archive/1/532726/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2014/Jul/38
mailing-listx_refsource_FULLDISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.