Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Admin control panel security problem


mitch101

Recommended Posts

Posted

I bought a domain from avagoo.com. When I go into the OS commmerce admin control panel to edit and update, I am able to do so without entering a username or password. Concerned, I tested this out on another members site admin area (http://www.bookfare.avagoo.com/admin) and was able to edit and update anything. WTF?

Posted
I bought a domain from avagoo.com. When I go into the OS commmerce admin control panel to edit and update, I am able to do so without entering a username or password. Concerned, I tested this out on another members site admin area (http://www.bookfare.avagoo.com/admin) and was able to edit and update anything. WTF?

So you have an older version of osc. Now you have told the world that your admin is not secure. WTF?

Posted

http://www.bookfare.avagoo.com/admin

 

This is not my URL.

 

 

Looks like it is an older version, the info on the page is:

 

E-Commerce Engine Copyright © 2003 osCommerce

osCommerce provides no warranty and is redistributable under the GNU General Public License

Powered by osCommerce

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...