2 matches found
Code injection
PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...
5CVSS9.3AI score0.01354EPSS
SaveExploits0References2Affected Software1
CVE-2018-5190: Reliance on Cookies without Validation and Integrity Checking
PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...
9.8CVSS8.4AI score0.01354EPSS
SaveExploits0References2
20