CVE-2023-33279

The CVE-2023-33279 issue affects the Store Commander scfixmyprestashop module for PrestaShop (through 2023-05-09). The vulnerability enables sensitive SQL calls to be triggered by a trivial HTTP request, enabling exploitation of a blind SQL injection. Affected component: Store Commander scfixmypr...

CVE-2023-33278

CVE-2023-33278 affects the PrestaShop Store Commander scexportcustomers module up to version 3.6.1. The root cause is that sensitive SQL calls can be triggered by a trivial HTTP request, enabling a blind SQL injection. Impact is high on confidentiality, integrity and availability as described in ...

PT-2023-24265 · Prestashop +1 · Store Commander Scquickaccounting Module +1

Name of the Vulnerable Software and Affected Versions: Store Commander scquickaccounting module for PrestaShop versions through 3.7.3 Description: The issue allows multiple sensitive SQL calls to be executed with a trivial HTTP request, which can be exploited to forge a blind SQL injection...

CVE-2023-33280

CVE-2023-33280 affects the Store Commander scquickaccounting module for PrestaShop up to version 3.7.3. The vulnerability allows multiple sensitive SQL calls to be performed via a trivial HTTP request, enabling a blind SQL injection. The CVSS vector provided indicates Network access, low attack c...

CVE-2023-33280

In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection...

CVE-2023-30281

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...

CVE-2023-30281

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...

CVE-2023-30281

The CVE-2023-30281 entry affects Store Commander for PrestaShop, specifically scquickaccounting versions prior to 3.7.3. The underlying issue is insecure permissions that fail to restrict access to exports, allowing a guest to access data that is exported by the module. The practical impact state...

SUSE CVE-2004-0226

Multiple buffer overflows in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...

SUSE CVE-2004-0232

Multiple format string vulnerabilities in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...

SUSE CVE-2004-0231

Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...

SUSE CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

SUSE CVE-2004-1005

Multiple buffer overflows in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

SUSE CVE-2004-1009

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service infinite loop via unknown attack vectors...

SUSE CVE-2004-1092

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory...

SUSE CVE-2004-1093

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."...

SUSE CVE-2004-1090

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."...

SUSE CVE-2004-1091

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference...

SUSE CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...

SUSE CVE-2004-1174

direntry.c in Midnight Commander mc 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...