CVE-2014-5104

CVE-2014-5104 affects ol-commerce 2.1.1 and involves multiple SQL injection vulnerabilities in PHP scripts: affiliate_signup.php (a_country), affiliate_show_banner.php (affiliate_banner_id), create_account.php (country), and admin/create_account.php (entry_country_id). The root cause is improper ...

CVE-2014-5105

The CVE-2014-5105 entry concerns OL-Commerce 2.1.1 with two reflected XSS vectors: (1) a_country in process action to affiliate_signup.php and (2) entry_country_id in edit action to admin/create_account.php. The underlying issue is cross-site scripting due to unsanitized input in these parameters...