Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-45461

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00066EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/04 11:15 p.m.1 views

CVE-2023-40922

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...

9.8CVSS5.8AI score0.00066EPSS
Exploits0References2
OSV
OSV
added 2023/11/04 11:15 p.m.2 views

CVE-2023-40922

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...

9.8CVSS5.8AI score0.00066EPSS
Exploits0References1
NVD
NVD
added 2023/11/04 11:15 p.m.7 views

CVE-2023-40922

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...

9.8CVSS9.8AI score0.00066EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/11/04 12:0 a.m.2 views

PT-2023-27702 · Kerawen · Kerawen

Name of the Vulnerable Software and Affected Versions: Kerawen versions prior to 2.5.1 Description: The issue is related to a SQL injection vulnerability. It occurs via the ocs id cart parameter at the KerawenDeliveryModuleFrontController::initContent function. Recommendations: For versions prior...

9.8CVSS9.7AI score0.00066EPSS
Exploits0References3
CVE
CVE
added 2023/11/04 12:0 a.m.45 views

CVE-2023-40922

Kerawen before v2.5.1 has a SQL injection via the ocs_id_cart parameter in KerawenDeliveryModuleFrontController::initContent(), affecting versions prior to 2.5.1. CVSS 3.1 base 9.8 (CRITICAL): No privileges, network vector, no user interaction; impacts confidentiality, integrity, and availability...

9.8CVSS9.8AI score0.00066EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/04 12:0 a.m.14 views

CVE-2023-40922

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...

8.5AI score0.00066EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/04 12:0 a.m.1 views

PrestaShop Kerawen Security Vulnerability

PrestaShop KerAwen is an e-commerce cash register solution from PrestaShop USA. A security vulnerability exists in PrestaShop Kerawen versions prior to v2.5.1 that stems from the parameter ocsidcart containing an SQL injection vulnerability...

9.8CVSS7.8AI score0.00066EPSS
Exploits0References2
Rows per page
Query Builder