Advisories · Technology
sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers.
Every CVE that names sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter
- sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
- Insecure deserialization
- CVSS 8.8 High
Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation
- sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
- CWE-620
- CVSS 5.3 Medium
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
- sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
- Broken access control
- CVSS 4.3 Medium
Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass
- sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
- Cross-site request forgery (CSRF)