| शीर्षक | ShopXO 6.7.1 Authorization Bypass |
|---|
| विवरण | A vulnerability was found in Gong Fuxiang ShopXO V6.7.1. Affected are the functions OrderClose, OrderSuccess,
PayLogOrderClose and GoodsGiveIntegral of the file app/api/controller/Crontab.php of the component Scheduled Task
Endpoint. The manipulation leads to missing authorization on cron-task endpoints, allowing an unauthenticated attacker
to forcibly advance shipped orders to the "completed" state, prematurely grant goods-bound integrals, mass-close
overdue unpaid orders with inventory rollback, and close overdue pay logs. The attack can be initiated remotely. No
authentication is required for exploitation. The parent controller defines an IsLogin() helper but does not invoke it
from the Crontab controller, and the four action methods carry no per-method authorization gate. The exploit has been
disclosed to the public and may be used. |
|---|
| स्रोत | ⚠️ https://github.com/yunyan05/MYCVE/tree/main/ShopXO/V6.7.1-Unauthenticated-Crontab-Trigger |
|---|
| उपयोगकर्ता | yunyan05 (UID 90348) |
|---|
| सबमिशन | 15/05/2026 11:11 AM (5 महीनों पहले) |
|---|
| संयम | 14/06/2026 01:54 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 370847 [ShopXO तक 6.7.1 Scheduled Task Endpoint Crontab.php अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|