Full title: OL-Commerce 2.1.1 Cross Site Scripting / SQL Injection Vulnerabilities Category: web applications Platform: php OL-Commerce version 2.1.1 suffers from cross site scripting and remote SQL injection vulnerabilities. # 0day.today @ http://0day.today/