5 matches found
CVE-2016-10757
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php...
CVE-2016-10757: Cross-Site Request Forgery (CSRF)
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php...
PT-2019-7553
Name of the Vulnerable Software and Affected Versions Redaxo version 5.2.0 Description The issue affects the cron management in the admin panel, where a CSRF vulnerability can lead to arbitrary Remote Code Execution. This is achieved through the addons/cronjob/lib/types/phpcode.php file...
PT-2018-18646
Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.5.5.0 through 1.7.2.5 Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module version 1.0.32 Description The issue allows remote attackers to execute a SQL Injection through function calls in the code parameter of th...
PT-2018-18645
Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.5.5.0 through 1.7.2.5 Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module version 1.0.32 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the code parameter in the...