CVE-2023-39647

CVE-2023-39647 describes an SQL injection in the PrestaShop Theme Volty CMS Category Product module (tvcmscategoryproduct) up to version 4.0.1. The vulnerability arises from improper neutralization of SQL parameters, allowing a guest to inject SQL (per the vendor/NVD details). Impact is reported ...

CVE-2023-39646

Theme Volty CMS Category Chain Slider (PrestaShop) vulnerable in tvcmscategorychainslider up to version 4.0.1 due to improper neutralization of SQL parameters, enabling SQL injection by a guest. Affected component is the PrestaShop module from Theme Volty with the vulnerable code path in the Cate...

CVE-2023-39651

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” tvcmsbrandlist up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39651

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” tvcmsbrandlist up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39645

The CVE-2023-39645 entry concerns the Theme Volty CMS Payment Icon module for PrestaShop. Affected versions are up to 4.0.1, where a guest can perform SQL injection due to improper neutralization of SQL parameters. The vulnerability is exploitable via the module’s TVCMSPaymentIcon endpoint, speci...

CVE-2023-39648

Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” tvcmstestimonial up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39648

Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” tvcmstestimonial up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39648

CVE-2023-39648 describes an SQL injection in the PrestaShop Theme Volty CMS Testimonial module (tvcmstestimonial) up to version 4.0.1. The vulnerability arises from improper neutralization of SQL parameters, allowing a guest to inject SQL statements. Documented impact is high on confidentiality, ...

CVE-2023-39647

Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop. In the module “Theme Volty CMS Category Product” tvcmscategoryproduct up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

PT-2023-27052 · Prestashop · Theme Volty Cms Category Chain Slider

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Category Slider module for PrestaShop versions up to 4.0.1 Description: The issue is related to the improper neutralization of SQL parameters in the Theme Volty CMS Category Slider module for PrestaShop, allowing a guest to...

PT-2023-27051 · Prestashop +1 · Theme Volty Cms Testimonial Module +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Testimonial module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS Testimonial module for PrestaShop, allowing a guest to perform SQL...

CVE-2023-39651

CVE-2023-39651 affects the Theme Volty CMS BrandList module for PrestaShop up to version 4.0.1. The root issue is improper neutralization of SQL parameters in the BrandList component, allowing unauthenticated SQL injection by a guest. Public source data (NVD) rates this with a CVSS v3.1 base scor...

CVE-2023-39649

Summary : CVE-2023-39649 affects the Theme Volty CMS Category Slider module for PrestaShop, up to version 4.0.1. The root cause is improper neutralization of SQL parameters, allowing a guest to perform SQL injection in affected versions. Affected product/scope : Theme Volty CMS Category Slider (t...

CVE-2023-39649

Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop. In the module “Theme Volty CMS Category Slider” tvcmscategoryslider up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

PT-2023-27049 · Prestashop +1 · Theme Volty Cms Category Chain Slider +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Category Chain Slider module for PrestaShop versions up to 4.0.1 Description: The issue is related to the improper neutralization of SQL parameters in the Theme Volty CMS Category Chain Slider module for PrestaShop. This allow...

PT-2023-27055 · Unknown · Theme Volty Cms Brandlist +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS BrandList module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS BrandList module for PrestaShop. This allows a guest to perform SQL...

CVE-2023-39652

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run...

PrestaShop Theme Volty SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image zoom and other features. A security vulnerability exists in PrestaShop Theme Volty CMS Blog prior to v4.0.1, which stems from t...

CVE-2023-39652

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run...

PrestaShop Theme Volty SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, SMS alerts and product image scaling and other features. A security vulnerability exists in PrestaShop Theme Volty prior to v4.0.1, which stems from the...