PT-2017-7554

Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary SQL commands via the download parameter in the check download and possibly check filename function in upload/admin2/model/products/model admin...

PT-2017-7555

Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary PHP code via a URL in the file path parameter to "upload/admin2". This is a result of a PHP remote file inclusion vulnerability in the get file...