21 matches found
CVE-2022-31101
CVE-2022-31101 PrestaShop bockwishlist 모듈 2.1.0 SQLiCVE-2022-31101용 익스플로잇 사용법 python3 cve-2022-31101.py 프롬프트가 표시되면 위시리스트의 URL을 입력합니다. URL 예시: http://example.com/module/blockwishlist/view?idwishlist=1 프롬프트가 표시되면 계정의 쿠키를 입력합니다. 이제 웹사이트 공격이 시작됩니다. 실행 화면 참고 이 익스플로잇은 데이터베이스의 테이블 이름 접두사가 ps라고 가정합니다. 이는...
Prestashop Blockwishlist 2.1.0 SQL Injection
Prestashop Blockwishlist module version 2.1.0 suffers from a remote authenticated SQL injection vulnerability. id: CVE-2022-31101 info: name: Prestashop Blockwishlist 2.1.0 SQL Injection author: mastercho severity: high description: | Prestashop Blockwishlist module version 2.1.0 suffers from a...
CVE-2026-92810
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for any wishlist by identifier. Attackers can supply sequential wishlist identifiers to obtain valid share links and read...
CVE-2026-92810 PrestaShop blockwishlist through 3.0.2 Information Disclosure
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for any wishlist by identifier. Attackers can supply sequential wishlist identifiers to obtain valid share links and read...
CVE-2026-92810 PrestaShop blockwishlist through 3.0.2 Information Disclosure
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for any wishlist by identifier. Attackers can supply sequential wishlist identifiers to obtain valid share links and read...
EUVD-2026-81068
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for any wishlist by identifier. Attackers can supply sequential wishlist identifiers to obtain valid share links and read...
CVE-2026-92810 PrestaShop blockwishlist through 3.0.2 Information Disclosure
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for any wishlist by identifier. Attackers can supply sequential wishlist identifiers to obtain valid share links and read...
CVE-2026-92810
PrestaShop blockwishlist module through version 3.0.2 contains an Insecure Direct Object Reference (IDOR) in the getUrlByIdWishListAction method. The module fails to validate wishlist ownership, so any authenticated customer can supply sequential wishlist identifiers to retrieve valid share token...
PT-2026-94082
Name of the Vulnerable Software and Affected Versions PrestaShop blockwishlist versions prior to 3.0.3 Description Authenticated customers can retrieve share tokens for any wishlist by providing sequential identifiers. This occurs because the getUrlByIdWishListAction function fails to validate...
Exploit for SQL Injection in Prestashop Blockwishlist
CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1...
Prestashop blockwishlist module 2.1.0 - SQL injection Exploit
Exploit Title: Prestashop blockwishlist module 2.1.0 - SQLi Date: 29/07/22 Exploit Author: Karthik UJ @5up3r541y4n Vendor Homepage: https://www.prestashop.com/en Software Link blockwishlist: https://github.com/PrestaShop/blockwishlist/releases/tag/v2.1.0 Software Link prestashop:...
Prestashop blockwishlist module 2.1.0 - SQLi
Exploit Title: Prestashop blockwishlist module 2.1.0 - SQLi Date: 29/07/22 Exploit Author: Karthik UJ @5up3r541y4n Vendor Homepage: https://www.prestashop.com/en Software Link blockwishlist: https://github.com/PrestaShop/blockwishlist/releases/tag/v2.1.0 Software Link prestashop:...
Exploit for SQL Injection in Prestashop Blockwishlist
!Contributorscontributors-shieldcontributors-url !Fork...
CVE-2022-31101
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue...
Sql injection
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue...
CVE-2022-31101
Prestashop Blockwishlist module (version 2.1.0) is affected by a remote authenticated SQL injection vulnerability (CVE-2022-31101). The underlying issue arises in the Blockwishlist extension used to display customer wishlists, enabling an authenticated user to inject SQL via insufficient input va...
CVE-2022-31101 SQL Injection in prestashop/blockwishlist
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue...
CVE-2022-31101
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue...
CVE-2022-31101: Improper Neutralization of Special Elements used in an SQL Command
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue...
