Shopify · Report #1417288

Admin panel Exposure without credential at https://plus-website.shopifycloud.com/admin.php

Validstatus

mediumseverity

$2,900bounty

109upvotes

11 Aug 2022disclosed

How it was found

Hey team

I found the admin panel at https://plus-website.shopifycloud.com/admin.php?_page=1 exposed without authentication

attacker can destroy and edit data

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original