CVE-2018-5190

PicturesPro Photo Cart 6 and 7 prior to Security-Patch-2018-B are vulnerable to an unauthenticated remote access flaw: an attacker can obtain arbitrary customer accounts by modifying cookies related to pc_head.php, pc_login.php, and pc_login_page.php. The issue is documented in CVE-2018-5190 and ...