CVE-2023-39646

Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop. In the module “Theme Volty CMS Category Chain Slide"tvcmscategorychainslider up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39651

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” tvcmsbrandlist up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39645

Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop. In the module “Theme Volty CMS Payment Icon” tvcmspaymenticon up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39651

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” tvcmsbrandlist up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39646

Theme Volty CMS Category Chain Slider (PrestaShop) vulnerable in tvcmscategorychainslider up to version 4.0.1 due to improper neutralization of SQL parameters, enabling SQL injection by a guest. Affected component is the PrestaShop module from Theme Volty with the vulnerable code path in the Cate...

CVE-2023-39646

Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop. In the module “Theme Volty CMS Category Chain Slide"tvcmscategorychainslider up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

PT-2023-27050 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Category Product module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS Category Product module for PrestaShop, allowing a guest to...

CVE-2023-39648

Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” tvcmstestimonial up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image scaling. PrestaShop suffers from an SQL injection vulnerability that originates from improper neutralization of SQL parameters...

CVE-2023-39648

CVE-2023-39648 describes an SQL injection in the PrestaShop Theme Volty CMS Testimonial module (tvcmstestimonial) up to version 4.0.1. The vulnerability arises from improper neutralization of SQL parameters, allowing a guest to inject SQL statements. Documented impact is high on confidentiality, ...

PT-2023-27048 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Payment Icon module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS Payment Icon module for PrestaShop, allowing a guest to perform SQL...

CVE-2023-39647

Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop. In the module “Theme Volty CMS Category Product” tvcmscategoryproduct up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

PT-2023-27052 · Prestashop · Theme Volty Cms Category Chain Slider

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Category Slider module for PrestaShop versions up to 4.0.1 Description: The issue is related to the improper neutralization of SQL parameters in the Theme Volty CMS Category Slider module for PrestaShop, allowing a guest to...

PT-2023-27051 · Prestashop +1 · Theme Volty Cms Testimonial Module +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Testimonial module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS Testimonial module for PrestaShop, allowing a guest to perform SQL...

PT-2023-27055 · Unknown · Theme Volty Cms Brandlist +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS BrandList module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS BrandList module for PrestaShop. This allows a guest to perform SQL...

CVE-2023-39649

Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop. In the module “Theme Volty CMS Category Slider” tvcmscategoryslider up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39650

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...

Sql injection

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...

CVE-2023-39650

The CVE-2023-39650 entry corresponds to a SQL injection in the PrestaShop Theme Volty CMS Blog module (tvcmsblog) up to version 4.0.1, exploitable via the id parameter at /tvcmsblog/single. The nuclei template confirms the vulnerability in tvcmsblog up to 4.0.1 and describes impact as arbitrary S...