SeongJoon Cho is a security researcher at SSD Labs, specializing in web security. He has been working in the field of offensive security since 2020, with past experience in researching embedded devices, web applications, and Windows systems.
Online shopping malls are widely used in South Korea. At the core of these platforms are Content Management Systems (CMS) that manage everything from products to customer data and transactions.
The online shopping ecosystem in South Korea is largely dominated by a few CMS platforms. Our research analyzed two widely used CMS solutions and uncovered 15 critical vulnerabilities.
This talk will introduce the architecture of CMS platforms and their security mitigations. We will provide details on various vulnerabilities, including file read, account takeover, and remote code execution. Finally, we will conclude by sharing how these vulnerabilities were responsibly patched through South Korea’s unique bug report program.