EUVD-2018-13389

Malware in sbrugna...

CVE-2018-20849

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

CVE-2018-20849

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

CVE-2018-20849

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

Design/Logic Flaw

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

CVE-2018-20849

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

Arastta eCommerce Cross-Site Scripting Vulnerability

Arastta eCommerce is an open source eCommerce platform. A cross-site scripting vulnerability exists in Arastta eCommerce version 1.6.2. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

CVE-2018-20849: Improper Neutralization of Input During Web Page Generation

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

PT-2019-10277

Name of the Vulnerable Software and Affected Versions: Arastta eCommerce version 1.6.2 Description: The issue allows for XSS attacks via the PATH INFO to the "login/" URI. Recommendations: For Arastta eCommerce version 1.6.2, update to a version that fixes this issue, as using the PATH INFO to th...

Arastta 1.6.2 Cross Site Scripting

================================================= Synopsis: Arastta 1.6.2 xss vulnerability Product: Arastta eCommerce: Free Shopping Cart Version: 1.6.2 Researcher: Matt Landers [email protected] twitter.com/matthewjland https://mjlanders.org/ ================================================...