VYPR

mcart.xls

by Bitrix

CVEs (1)

  • CVE-2015-8356HigApr 14, 2017
    risk 0.55cvss 8.0epss 0.03

    Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the (1) xls_profile parameter to admin/mcart_xls_import.php or the (2) xls_iblock_id, (3) xls_iblock_section_id, (4)…