PT-2020-12534 · Prestashop · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions 1.5.3.0 through 1.7.6.6 PrestaShop versions 1.5.3.0 through 1.7.7.6 Description: The issue is related to a stored XSS when using the name of a quick access item. Recommendations: For PrestaShop versions 1.5.3.0 through...

CVE-2020-11074: Improper Neutralization of Input During Web Page Generation

In PrestaShop from version 1.5.3.0 and before version 1.7.6.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.6.6...

PT-2020-22271

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash state involves functions such as r read le32, dex method...

PT-2020-22369

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves several functions, including asn1 item print ctx and asn1 template print ctx. No...

WordPress Easy Testimonials plugin cross-site scripting vulnerability (CNVD-2020-52690)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy Testimonials is a sidebar testimonials button plugin used in it. A cross-site scripting vulnerability exists in WordPress Easy...

OXID eShop 6.3.4 - (sorting) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: OXID eShop 6.3.4 - 'sorting' SQL Injection Exploit Author: VulnSpy Vendor Homepage: https://www.oxid-esales.com/ Software Link: https://github.com/OXID-eSales/oxideshopce Version: Versions 6.x prior to 6.3.4 Tested on:...

CVE-2020-8153

Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name...

CVE-2020-8153

Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name...

CVE-2020-12765

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

PT-2020-13253

Name of the Vulnerable Software and Affected Versions Solis Miolo version 2.0 Description The issue allows for Directory Traversal via the "index.php?module=install&action=view&item=" endpoint. This could potentially allow an attacker to access sensitive files on the system. Recommendations For...

PT-2020-10743

Name of the Vulnerable Software and Affected Versions ServiceNow IT Service Management versions Kingston through Patch 14-1 ServiceNow IT Service Management versions London through Patch 7 ServiceNow IT Service Management versions Madrid before patch 4 Description The issue allows stored XSS via...

Cross-site Scripting (XSS)

github.com/ctripcorp/apollo is vulnerable to cross-site scripting XSS attacks. The library does not properly escape the variable valueWithHiddenChars in showHiddenChars function in item-modal-directive.js, allowing a malicious user to inject and execute malicious web scripts...

CVE-2020-11561

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...

CVE-2020-11561

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...

Code injection

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...

CVE-2020-11561: Direct Request

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...

PT-2020-12694

Name of the Vulnerable Software and Affected Versions NCH Express Invoice version 7.25 Description The issue allows an authenticated low-privilege user to access higher-privileged functionalities by entering a crafted URL. This can provide access to sensitive features such as the "Add New Item"...

Valve: Shell command injection in https://partner.steamgames.com/apps/communityitems/ via file extension of item_image_small and item_image_large

Shell command injection in https://partner.steamgames.com/apps/communityitems/ via file extension of itemimagesmall and itemimagelarge. Shell injection was achieved on a publishing gateway through metacharacter injection in an item-upload path...

CVE-2020-10107

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php...

GHSA-MXHP-79QH-MCX6 TaffyDB can allow access to any data items in the DB

TaffyDB allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. Taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properti...