Lucene search
K

6 matches found

NVD
NVD
added 2024/03/03 8:15 a.m.8 views

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

7.5CVSS6.5AI score0.00076EPSS
Exploits0References1
Prion
Prion
added 2024/03/03 8:15 a.m.14 views

Path traversal

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

7AI score0.00076EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/03/03 12:0 a.m.1 views

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability previously existed in PrestaShop Product Designer version 1.178.36, which stemmed...

7.5CVSS6.6AI score0.00076EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/03 12:0 a.m.9 views

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

6.7AI score0.00076EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/03 12:0 a.m.13 views

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

6.8AI score0.00076EPSS
Exploits0References1
CVE
CVE
added 2024/03/03 12:0 a.m.52 views

CVE-2024-24307

CVE-2024-24307 describes a Path Traversal in the PrestaShop Product Designer module (productdesigner) for PrestaShop, before version 1.178.36. The vulnerability exists in the ajaxProcessCropImage() method and can let an unauthenticated or remote attacker escalate privileges and access sensitive i...

7.5CVSS6.7AI score0.00076EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder