5/12/16 Patch for Admin Privilege Escalation issue in v150-v155


    

20.00

Add to Cart:

We received notification from the Zen Cart Development Team that there existed a potential admin privilege escalation issue whereby logged-in admin users of v1.5.0-to-v1.5.5 (before v1.5.5a) could change their own user profile permissions if they engaged in some hackery.

This only poses a risk when multiple admin users exist AND some have been assigned a profile restricting their privileges to disallow access to certain admin sections ... AND they have some malicious desire to gain access to changing settings or viewing data against which they've been restricted.

The fix involves replacing one file.

 


Shopping Cart

Your cart is empty.

Customer Reviews

Judy Rocks!!

Judy is absolutely the BEST! She did in less than three days what another person had been working on for three months and still didn't have it up and...
Read More ->


Thank you, Judy!

With much stress and disarray of trying to install and operate Zen Cart on my own, I called Judy. Instantly we hit it off and she effortlessly got my...
Read More ->


Don't hesistate!

I was having the worst problems with my web host, my site was down more then it was up. When it was up and running, it was very slow. I had Judy make...
Read More ->


#1 Professional company to work with!

Zen cart review: for zencarthostingservice.com and zencart-ecommerce-website-design.com LOOK NO FURTHER! Because you will get the best of the best...
Read More ->


Better than I could ever hope for

Wish I had known of Judy long ago. Too many bad memories of expensive, non responsive IT help before. Found Judy looking for info on how to update my...
Read More ->


Who's Online

There currently are 7 guests online.
Copyright © 2004 - 2021 ZenCart Ecommerce Website Design
Zen Cart Templates Zen Cart Guru
Powered by Zen Cart