Web Security Insights By Maloy Roy Orko

Hi All,  I am Maloy Roy Orko Recently in one of my pentest research, I found a E-commerce System By Script And Tools which is an open source E-commerce Software. Curious to explore its functionalities, I downloaded and set it up in my local system.  After fiddling with the source code, I found that the /admin/subscriber-csv.php file is vulnerable to Unauthorized access to subscriber data in 'admin/subscriber-csv.php' leading to potential data exposure. It can lead into: - Privacy Violations   - Reputational Damage   - Legal and Regulatory  Consequences   - Increased Risk of Phishing and Spam - Operational Impact   - Loss of Competitive Advantage   The Main Thing Is,If any NON-IT personal uses this template,he will fall into this vulnerability and his companies reputation can be lost too. Thats why, I am trying to inform everyone about this. Title of the Vulnerability:  Script and Tools | eCommerce 3.0 | admin/subscri...