Avactis – Full Disclosure
voidsec2022-01-14T09:22:23+01:00
Advisory:
VoidSec-16-001
Date of contact:
19-01-16
2nd date of contact:
23-01-16
Vendor reply:
N/A
Date of public disclosure:
12-04-16
Product:
Avactis PHP Shopping Cart
Version:
4.7.9.Next.47900
Vendor:
Avactis
Download the Report [EN]
Introduction
Avactis is an open source ecommerce Shopping Cart software. The purpose of the present project is to assess the security posture of some important aspects of Avactis PHP Shopping Cart. The activity is performed through Web Application Penetration Test using Grey Box approach.
Vulnerabilities:
Spreading of Files with Malicious Extensions on Upload New Design and Execution in some
circumstances
Non-Admin PHP Shell...
