CVE-2023-30196: Improper Limitation of a Pathname to a Restricted Directory

Prestashop salesbooster = 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php...

CVE-2023-30196

Prestashop salesbooster = 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php...

CVE-2023-30199

Prestashop customexporter = 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php...

Improper access control

Prestashop customexporter = 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php...

CVE-2023-30199: Improper Limitation of a Pathname to a Restricted Directory

Prestashop customexporter = 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php...

CVE-2023-30199

Prestashop customexporter = 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php...

Sql injection

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

CVE-2022-41390

Summary (CVE-2022-41390): OcoMon v4.0 is affected by a SQL injection vulnerability in the download.php endpoint, triggered via the cod parameter. The issue is described as affecting the ability to inject SQL through this parameter, with the CVSS v3.1 metrics indicating a critical impact (AV:N/AC:...

CVE-2022-41390

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

CVE-2022-41390: Improper Neutralization of Special Elements used in an SQL Command

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

CVE-2022-29720

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php...

CVE-2022-29720

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php...

CVE-2022-29720

CVE-2022-29720 affects 74cmsSE v3.5.1. A vulnerability in index\controller\Download.php enables an arbitrary file read. Documented references confirm the component and location; no exploit details or remediation are provided in the supplied sources. If applicable, apply vendor advisories or patch...

CVE-2022-29720: Files or Directories Accessible to External Parties

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php...

OpenCart Path Traversal

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...

CVE-2022-26271

74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php...

CVE-2022-26271

74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php...

CVE-2022-26271

74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php...

CVE-2022-26271: Files or Directories Accessible to External Parties

74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php...

Xerte path traversal vulnerability

Xerte is an open source software from The Xerte Project community in the UK. Used to create learning objects. Xerte has a security vulnerability that stems from a directory traversal vulnerability in the Xerte Project Xerte to 3.10.3 when downloading project files via download.php. No details of...