Lucene search
K

8 matches found

OSV
OSV
added 2024/03/03 10:15 a.m.1 views

CVE-2024-26469

Server-Side Request Forgery SSRF vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service DoS and escalate privileges via the url parameter in the postProcess method...

8.1CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/03/03 9:15 a.m.0 views

CVE-2024-24302

An issue was discovered in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess method...

9.8CVSS6AI score
Exploits0References1
CNNVD
CNNVD
added 2024/03/03 12:0 a.m.1 views

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability previously existed in PrestaShop Product Designer version 1.178.36, which stemmed from a...

8.1CVSS7AI score0.00273EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/03/03 12:0 a.m.3 views

PT-2024-20345 · Prestashop · Prestashop Product Designer Module

Name of the Vulnerable Software and Affected Versions: PrestaShop Product Designer module versions prior to 1.178.36 Description: An issue in the Product Designer module for PrestaShop allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the...

9.8CVSS8AI score0.01591EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/03/03 12:0 a.m.12 views

CVE-2024-24302

An issue was discovered in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess method...

7.7AI score0.01591EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/03 12:0 a.m.15 views

CVE-2024-24302

An issue was discovered in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess method...

7.6AI score0.01591EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/10/17 5:15 a.m.1 views

CVE-2023-45375

In the module "PireosPay" pireospay before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL injection via PireosPayValidationModuleFrontController::postProcess...

8.8CVSS7.4AI score0.87786EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/06/14 12:0 a.m.1 views

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts, and product image scaling. A security vulnerability exists in PrestaShop postfinance version 17.1.13 and earlier versions, which stems...

9.8CVSS8.6AI score0.00087EPSS
Exploits0References2
Rows per page
Query Builder