sunshinephotocart — Vulnerabilities & Security Advisories 18

Sunshinephotocart is an e-commerce shopping cart solution designed for photographers to sell digital images and prints online. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, SQL injection, and privilege escalation vulnerabilities. The application's 17 recorded CVEs highlight consistent security flaws, particularly in input validation and access control. Notable incidents include multiple RCE vulnerabilities allowing attackers to execute arbitrary code on server systems, and persistent XSS issues enabling client-side script injection. These vulnerabilities often stem from insufficient sanitization of user inputs and inadequate protection against unauthorized access, posing significant risks to both store operators and their customers.