2 matches found
Code injection
PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...
5CVSS9.3AI score0.01354EPSS
SaveExploits0References2Affected Software1
PT-2018-16788
Name of the Vulnerable Software and Affected Versions PicturesPro Photo Cart versions 6 and 7 before Security-Patch-2018-B Description The issue allows remote attackers to access arbitrary customer accounts via a modified cookie. This is related to the files pc head.php, pc login.php, and pc logi...
9.8CVSS0.01354EPSS
SaveExploits0References4
20