CVE-2016-0769

Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow 1 remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the 2 view, 3 mark, or 4 change parameter...

CVE-2016-0765

Multiple cross-site scripting XSS vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 action parameter...

PT-2017-7653

Name of the Vulnerable Software and Affected Versions eShop plugin version 6.3.14 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the page or action parameter in the...

CVE-2016-0765: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 action parameter...

PT-2017-7656

Name of the Vulnerable Software and Affected Versions eShop plugin version 6.3.14 Description The issue allows remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the view, mark, or change parameter...

CVE-2016-0769: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow 1 remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the 2 view, 3 mark, or 4 change parameter...