7 matches found
CVE-2024-33275
SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...
CVE-2024-33275
SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...
PrestaShop SQL注入漏洞
PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, SMS alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop Webbax v.1.4.21 and earlier versions, which originates from a vulnerabili...
CVE-2024-33275
The CVE describes a SQL injection affecting Webbax supernewsletter v1.4.21 and earlier, via the product_search.php component of the Super Newsletter module. The root cause is an SQL injection that enables a remote attacker to escalate privileges, with impact described as high confidentiality, int...
CVE-2024-33275
SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...
taokas-bicycle.cn XSS vulnerability
Open Bug Bounty ID: OBB-603273 Description| Value ---|--- Affected Website:| taokas-bicycle.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Unfixed XSS vulnerability at www.steroids-pharma.com
Security researcher Xylitol, has submitted on 30/05/2010 a cross-site-scripting XSS vulnerability affecting www.steroids-pharma.com, which at the time of submission ranked 1005260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It i...