CVE-2020-12120

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers...

PrestaShop Correos Express Information Disclosure Vulnerability

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The program provides a variety of payment methods , SMS alerts and product image scaling and other features . Correos Express is one of the logistics management plug-ins . A security vulnerability exists in Correos...

CVE-2020-12120

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers...

CVE-2020-12120

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers...

Design/Logic Flaw

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers...

CVE-2020-12120

CVE-2020-12120 affects the Correos Express addon for PrestaShop 1.6–1.7. A remote attacker can trigger information disclosure, including a service owner's password used to modify orders via SOAP, and can also retrieve detailed data on orders or buyers. The linked Red Hat, CNVD, and CVE records co...

CVE-2020-12120

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers...

CVE-2020-12120: Incorrect Permission Assignment for Critical Resource

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers...