EUVD-2023-27415

Malicious code in bioql PyPI...

CVE-2023-23315

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

CVE-2023-23315

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

CVE-2023-23315

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

Sql injection

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

CVE-2023-23315

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

PT-2023-18904 · Prestashop · Stripejs

Name of the Vulnerable Software and Affected Versions: PrestaShop e-commerce platform module stripejs versions up to 4.5.5 Description: The issue concerns a Blind SQL injection vulnerability. The method stripejsValidationModuleFrontController::initContent contains sensitive SQL calls that can be...

CVE-2023-23315: Improper Neutralization of Special Elements used in an SQL Command

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

CVE-2023-23315

The PrestaShop stripejs module up to version 4.5.5 contains a Blind SQL injection in stripejsValidationModuleFrontController::initContent(), exploitable via a simple HTTP request and capable of affecting confidentiality, integrity, and availability. Remediation guidance across connected sources i...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image zoom. A security vulnerability exists in the PrestaShop e-commerce platform prior to version 4.5.5, which stems from the module...