8 matches found
CVE-2026-50986
PrestaShop module, totadministrativemandate 1.8.1 is vulnerable to Cross Site Request Forgery CSRF. The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link...
CVE-2026-50986
PrestaShop module, totadministrativemandate 1.8.1 is vulnerable to Cross Site Request Forgery CSRF. The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link...
CVE-2026-50986
CVE-2026-50986 affects the PrestaShop module totadministrativemandate prior to 1.8.1. The root cause is a missing CSRF token in the payment validation controller, enabling CSRF exploitation to confirm an order in the awaiting state by hijacking a link. The CVSS vector indicates high impact to con...
EUVD-2022-49743
Malicious code in bioql PyPI...
CVE-2022-46965
PrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability...
CVE-2022-46965
PrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability...
PT-2023-15120 · Unknown · Totadministrativemandate +1
Name of the Vulnerable Software and Affected Versions: PrestaShop module, totadministrativemandate versions prior to 1.7.1 Description: The issue is related to a SQL injection vulnerability. Recommendations: For versions prior to 1.7.1, update to version 1.7.1 or later to resolve the issue...