8 matches found
EUVD-2023-45461
Malicious code in bioql PyPI...
CVE-2023-40922
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...
CVE-2023-40922
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...
CVE-2023-40922
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...
PT-2023-27702 · Kerawen · Kerawen
Name of the Vulnerable Software and Affected Versions: Kerawen versions prior to 2.5.1 Description: The issue is related to a SQL injection vulnerability. It occurs via the ocs id cart parameter at the KerawenDeliveryModuleFrontController::initContent function. Recommendations: For versions prior...
CVE-2023-40922
Kerawen before v2.5.1 has a SQL injection via the ocs_id_cart parameter in KerawenDeliveryModuleFrontController::initContent(), affecting versions prior to 2.5.1. CVSS 3.1 base 9.8 (CRITICAL): No privileges, network vector, no user interaction; impacts confidentiality, integrity, and availability...
CVE-2023-40922
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...
PrestaShop Kerawen Security Vulnerability
PrestaShop KerAwen is an e-commerce cash register solution from PrestaShop USA. A security vulnerability exists in PrestaShop Kerawen versions prior to v2.5.1 that stems from the parameter ocsidcart containing an SQL injection vulnerability...