ShopMagic

An unauthenticated attacker can retrieve sensitive information placed in an externally accessible file or directory. The file path and exposed data fields are not disclosed. The endpoint, action and parameter are not disclosed. The CNA vector records limited confidentiality impact. Affected versions: at most 4.9.1.

ShopMagic can pass a guest checkout's billing_address.first_name through a published recipe's customer.first_name handling to a PHP include. An unauthenticated attacker can select a local include path when a relevant recipe is published; the built-in recipe qualifies only when published. Code execution additionally requires attacker-controlled or otherwise useful PHP content at an accessible path. Published affected versions: <= 4.9.0.

ShopMagic is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

ShopMagic is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.