EUVD-2020-7207

Malware in sbrugna...

CVE-2020-15079

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6...

CVE-2020-15079

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6...

CVE-2020-15079

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6...

Improper access control

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6...

CVE-2020-15079

In PrestaShop, CVE-2020-15079 affects versions 1.5.0.0 through before 1.7.6.6, caused by improper access control on the Carrier page, Module Manager, and Module Positions. The issue is documented as fixed in version 1.7.6.6. Connected sources corroborate the vulnerability description and fix path...

Informatica: [careers.informatica.com] Cross Site Script Vulnerability on informatica

Information:- Vulnerability resides on the Carriers page of informatica, where search bar of the carrier page failed to sanitized the users query and hence gives the XSS popup. Vulnerable URL:- https://careers.informatica.com/ Payload:- " Steps to Reproduce the Vulnerability 1. Open Carriers page...