EUVD-2015-9253

Malware in sbrugna...

PT-2017-6671

Name of the Vulnerable Software and Affected Versions Wordpress Eshop plugin versions 6.3.11 and earlier Description The issue concerns the eshop checkout function in the Wordpress Eshop plugin, which fails to validate variables in the "eshopcart" HTTP cookie. This allows remote attackers to...

CVE-2015-3421: Improper Neutralization of Input During Web Page Generation

The eshopcheckout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which allows remote attackers to perform cross-site scripting XSS attacks, or a path disclosure attack via crafted variables named after target P...

WordPress eShop Magic Plugin <= 0.1 - Local File Inclusion

This plugin is prone to eshop-magic/download.php file parameter traversal arbitrary file access vulnerability. It allows attackers to disclose sensitive information. Solution Update the plugin...