[APPSEC-921] Remote code execution

Authentication bypass uses special parameter that allows the execution of Admin action. The Admin action is vulnerable to SQL injection, which allows code to be inserted into the database and executed. As a result, the store can be fully compromised by creating counterfeit administrator accounts and/or installing malware on the server. Part of... Weiterlesen: [APPSEC-921] Remote code execution