EUVD-2018-15451

Malware in sbrugna...

EUVD-2018-15448

Malware in sbrugna...

Code injection

PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...

CVE-2018-5190

PicturesPro Photo Cart 6 and 7 prior to Security-Patch-2018-B are vulnerable to an unauthenticated remote access flaw: an attacker can obtain arbitrary customer accounts by modifying cookies related to pc_head.php, pc_login.php, and pc_login_page.php. The issue is documented in CVE-2018-5190 and ...