EUVD-2016-5879

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4903

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4903

CVE-2016-4903 is a cross-site scripting vulnerability affecting WP-OliveCart versions before 3.1.3 and WP-OliveCartPro versions before 3.1.8. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling script execution in a user’s browser...

PT-2017-8600

Name of the Vulnerable Software and Affected Versions WP-OliveCart versions prior to 3.1.3 WP-OliveCartPro versions prior to 3.1.8 Description A SQL injection issue allows attackers with administrator rights to execute arbitrary SQL commands. Recommendations For WP-OliveCart versions prior to...

CVE-2016-4905: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-4903: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4904: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended operations via unspecified vectors...