Software
Prestashop Customer Reassurance BlockAny value can be changed in the configuration table by an employee having access to block reassurance module
Prestashop PrestashopPrestaShop vulnerable to file deletion via CustomerMessage
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop vulnerable to file deletion via attachment API
Prestashop PrestashopPrestaShopSQL manager vulnerability (potential RCE)
Prestashop PrestashopPrestaShop vulnerable to path traversal
composer/prestashop/prestashopPrestaShop vulnerable to boolean SQL injection in search product in BO
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"
Prestashop PrestashopPrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopRemote code execution in prestashop
Prestashop PrestashopServer Side Twig Template Injection in PrestaShop
Prestashop PrestashopBlind SQLi using Search filters in PrestaShop
Prestashop PrestashopImproper session management for soft logout
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopBlind SQL Injection in PrestaShop
Prestashop ContactformPotential XSS in PrestaShop contactform
Prestashop PrestashopPrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinj…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.