PT-2017-6671

Name of the Vulnerable Software and Affected Versions Wordpress Eshop plugin versions 6.3.11 and earlier Description The issue concerns the eshop checkout function in the Wordpress Eshop plugin, which fails to validate variables in the "eshopcart" HTTP cookie. This allows remote attackers to...

CVE-2015-3421: Improper Neutralization of Input During Web Page Generation

The eshopcheckout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which allows remote attackers to perform cross-site scripting XSS attacks, or a path disclosure attack via crafted variables named after target P...

WordPress Plugin eShop Arbitrary Variable Override Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL. eShop is an accessible shopping cart WordPress plugin. An arbitrary variable override vulnerability exists in...