Vendor
A security flaw in BeikeShop up to 2.0.0.31 in the Guest Order Lookup feature allows for remote manipulation of the order_number argument.