CVE-2023-40921: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in functions/pointlist.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters...

PT-2023-27701 · Unknown · Common Services Soliberte

Name of the Vulnerable Software and Affected Versions: Common Services soliberte versions prior to 4.3.03 Description: The issue allows attackers to obtain sensitive information via the lat and lng parameters in the functions/point list.php file. This is a SQL Injection vulnerability, which means...

CVE-2023-40921

Common Services soliberte is affected by a SQL Injection in functions/point_list.php, exploitable via lat and lng parameters. Before v4.3.03, this class of vulnerability can disclose sensitive data. Affected file/version: soliberte prior to 4.3.03. Root cause: improper handling of input in SQL qu...

CVE-2023-40921

SQL Injection vulnerability in functions/pointlist.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters...

CVE-2023-45382

In the module "SoNice Retour" soniceretour up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a gues...

Path traversal

In the module "SoNice Retour" soniceretour up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a gues...

CVE-2023-45382

In the module "SoNice Retour" soniceretour up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a gues...

CVE-2023-45382: Improper Limitation of a Pathname to a Restricted Directory

In the module "SoNice Retour" soniceretour up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a gues...

CVE-2023-45382

The CVE-2023-45382 entry concerns the SoNice Retour module for PrestaShop (up to version 2.1.0) from Common-Services. A guest can perform a path traversal due to insufficient permissions checks and flawed path-name construction, allowing unauthorized viewing/download of personal information acros...

CVE-2023-45382

In the module "SoNice Retour" soniceretour up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a gues...

CVE-2023-45383

In the module "SoNice etiquetage" soniceetiquetage up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction...

Path traversal

In the module "SoNice etiquetage" soniceetiquetage up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction...

CVE-2023-45383

In the module "SoNice etiquetage" soniceetiquetage up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction...

CVE-2023-45383

In the module "SoNice etiquetage" soniceetiquetage up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction...

CVE-2023-45383

CVE-2023-45383 affects the SoNice etiquetage module for PrestaShop up to version 2.5.9. A guest can perform a path traversal due to insufficient permissions checks and flawed pathname construction, enabling viewing/downloading of personal information across the information system. The Red Hat/NVD...

PrestaShop Path Traversal Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop Common-Services version 2.5.9 and prior versions, which stems from a lac...

CVE-2023-45383: Improper Limitation of a Pathname to a Restricted Directory

In the module "SoNice etiquetage" soniceetiquetage up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction...

DoS Vulnerability in Hitachi Ops Center Common Services

Overview A DoS vulnerability CVE-2023-3967 exists in Hitachi Ops Center Common Services. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

CVE-2023-3967

Allocation of Resources Without Limits or Throttling vulnerability in Hitachi Ops Center Common Services on Linux allows DoS.This issue affects Hitachi Ops Center Common Services: before 10.9.3-00...

CVE-2023-3967 DoS Vulnerability in Hitachi Ops Center Common Services

Allocation of Resources Without Limits or Throttling vulnerability in Hitachi Ops Center Common Services on Linux allows DoS.This issue affects Hitachi Ops Center Common Services: before 10.9.3-00...