Ecommerce version 1.15 suffers from an ignored default credential vulnerability.