CVE-2023-46989

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts function in the productlist.php file...

CVE-2023-46989

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts function in the productlist.php file...

CVE-2023-46989

CVE-2023-46989 : A SQL Injection vulnerability exists in the Innovadeluxe Quick Order module for PrestaShop, affected in versions before 1.4.0. The issue is triggered via the getProducts() function in productlist.php, allowing a local attacker to execute arbitrary code. According to the connected...

CVE-2023-46989: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts function in the productlist.php file...

The new feature "Use existing identity pools to create identities for MCS-provisioned machines"

For quick deploy, it should be 1 to 1 mapping for identity pool to MCS catalog...

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop idxquickorder versions prior to 1.4.0, which originates...

PT-2023-30284

Name of the Vulnerable Software and Affected Versions Innovadeluxe Quick Order module for PrestaShop versions prior to 1.4.0 Description The issue allows local attackers to execute arbitrary code via the getProducts function in the productlist.php file. This is a SQL Injection vulnerability, whic...

CVE-2023-6913

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView withou...

CVE-2023-40659

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

CVE-2023-40659

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

Cross site scripting

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

CVE-2023-40659

Affected product: Easy Quick Contact module for Joomla. Vulnerability: reflected XSS in the Easy Quick Contact module. Root cause: not explicitly detailed beyond a reflected XSS flaw. Impact (per sources): enables cross-site scripting in victims’ browsers; CVSS v3.1 base score 6.1 (MEDIUM) with N...

CVE-2023-40659: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

PT-2023-27581 · Joomla · Easy Quick Contact

Name of the Vulnerable Software and Affected Versions: Easy Quick Contact module for Joomla affected versions not specified Description: A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla. Recommendations: At the moment, there is no information about a newer...

Joomla Security Breach

Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that originates from a reflected cross-site scripting vulnerability in the Easy Quick Contact module...

golang: crypto/tls: panic when processing post-handshake message on QUIC connections

A flaw was found in Golang. Processing an incomplete post-handshake message for a QUIC connection caused a panic...

golang: crypto/tls: panic when processing post-handshake message on QUIC connections

A flaw was found in Golang. Processing an incomplete post-handshake message for a QUIC connection caused a panic...

How to delete catalogs created in the "Quick Deploy" interface

This article describes how to delete catalogs created in the "Quick Deploy" interface...

CVE-2023-47829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codez Quick Call Button plugin = 1.2.9 versions...

CVE-2023-47829

CVE-2023-47829 affects Codez Quick Call Button plugin for WordPress, with the vulnerability described as Cross-site Scripting due to improper input neutralization in web page generation. Affected versions are