| शीर्षक | innocommerce innoshop <= 0.7.3 Missing Authorization |
|---|
| विवरण | InnoShop v0.7.3 and earlier is vulnerable to a pre-authentication application reinstall takeover. The installation endpoint POST /install/complete remains accessible without any authentication or CSRF protection after the application has been fully installed. An unauthenticated remote attacker can exploit this to overwrite the .env configuration file, execute migrate:fresh to drop all database tables (causing complete data loss), and create a new administrator account with attacker-controlled credentials, resulting in full system takeover. The root cause is that InstallServiceProvider::boot() unconditionally registers installation routes without checking the installed() status. |
|---|
| स्रोत | ⚠️ https://github.com/innocommerce/innoshop/issues/314 |
|---|
| उपयोगकर्ता | anch0r (UID 96691) |
|---|
| सबमिशन | 16/04/2026 02:38 PM (6 महीनों पहले) |
|---|
| संयम | 01/05/2026 04:28 PM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 360576 [innocommerce InnoShop तक 0.7.8 Installation Endpoint InstallServiceProvider.php boot कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|