Subscriber-to-Administrator takeover via mismatched customer authorization

Improper privilege management in SureCart 4.0.0 through 4.6.2 allows remote authenticated users to take over administrator accounts. A customer-update flow authorizes one customer account but applies the supplied update to a different user, exposing customer identifiers and email addresses and permitting an administrator email change. Subscriber-level access is sufficient to associate an attacker-controlled customer record with an arbitrary user, change the administrator's email, and complete a password reset.