CVE-2018-19853 in hitshop
Сводка
по MITRE
An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability (that allows control over the whole web site) via the admin.php/user/add URI because a storekeeper account (which is supposed to have only privileges for commodity management) can add an administrator account.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.