CyberRota Analysis
AI-GeneratedA high-severity vulnerability exists in aircheng-org iWebShop versions up to 5.15, specifically within the Update::index function in controllers/update.php, which suffers from missing authorization. This flaw allows for potential remote exploitation, as the exploit is publicly available. Organizations using this software should prioritize remediation to mitigate the risk of unauthorized access and potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.