TI-2018-03753 CVE-2018-5190 · GHSA-pjm7-rwqq-cwm2PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to…Priority MEDIUM 45PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pc_head.php, pc_login.php, and pc_login_page.php.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01354 · Published 2018-04-17 · No fix listed CWE-565