8 matches found
PHP-Injection-in-M4-PDF-Extensions
PHP-Injection-in-M4-PDF-Extensions CVE-2023-50029 is a PHP injection vulnerability in the M4 PDF Extensions module. This vulnerability allows attackers to inject and execute arbitrary PHP code on the server, enabling them to gain full control over the targeted system. The issue lies in the improp...
CVE-2023-50029
PHP Injection vulnerability in the module "M4 PDF Extensions" m4pdf up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate method...
CVE-2023-50029
PHP Injection vulnerability in the module "M4 PDF Extensions" m4pdf up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate method...
CVE-2023-50029
PHP Injection vulnerability in the module "M4 PDF Extensions" m4pdf up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate method...
CVE-2023-50029
The M4 PDF Extensions (m4pdf) module for PrestaShop , specifically versions up to 3.3.2 from PrestaAddons, contains a PHP Injection vulnerability. The root cause is the improper validation of inputs , which allows an attacker to pass malicious code through user parameters to the M4PDF::saveTempla...
CVE-2023-50029: Improper Control of Generation of Code
PHP Injection vulnerability in the module "M4 PDF Extensions" m4pdf up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate method...
PT-2024-13851 · Prestashop · Prestashop M4 Pdf Extensions Module
Name of the Vulnerable Software and Affected Versions: PrestaShop M4 PDF Extensions module versions up to 3.3.2 Description: The issue allows attackers to run arbitrary code via the M4PDF::saveTemplate method, potentially leading to code injection attacks. This could enable malicious activities,...
