Lucene search
+L

7 matches found

NVD
NVD
•added 2024/03/03 8:15 a.m.•15 views

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

7.5CVSS6.5AI score0.0072EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/03 8:15 a.m.•23 views

Path traversal

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

7AI score0.0072EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/03 12:00 a.m.•23 views

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

6.7AI score0.0072EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/03 12:00 a.m.•70 views

CVE-2024-24307

A Path Traversal vulnerability exists in the Tunis Soft Product Designer (productdesigner) module for PrestaShop before version 1.178.36 . A remote attacker can exploit the ajaxProcessCropImage() method to escalate privileges and access sensitive information . To mitigate this risk, users are rec...

7.5CVSS6.7AI score0.0072EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/03 12:00 a.m.•3 views

CVE-2024-24307: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

7.5CVSS6AI score0.0072EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/03 12:00 a.m.•16 views

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

6.8AI score0.0072EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/03 12:00 a.m.•15 views

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability previously existed in PrestaShop Product Designer version 1.178.36, which stemmed...

7.5CVSS6.6AI score0.0072EPSS
SaveExploits0References2
Rows per page
Query Builder