CVE-2024-28390

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control...

CVE-2024-28390: Improper Access Control

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control...

CVE-2024-28390

The Advanced Plugins ultimateimagetool module for PrestaShop is affected by an Improper Access Control vulnerability in versions prior to v.2.2.01 . This flaw allows a remote attacker to escalate privileges and obtain sensitive information. To remediate this issue, users should update to version ...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop ultimateimagetool versions prior to 2.2.01, which originated fro...

CVE-2024-28390

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control...

PT-2024-22410

Name of the Vulnerable Software and Affected Versions Advanced Plugins ultimateimagetool module for PrestaShop versions prior to 2.2.01 Description An issue in the ultimateimagetool module allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control...

CVE-2023-30200

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” ultimateimagetool in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...

CVE-2023-30200: Improper Limitation of a Pathname to a Restricted Directory

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” ultimateimagetool in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...

PT-2023-22583

Name of the Vulnerable Software and Affected Versions Image: WebP, Compress, Zoom, Lazy load, Alt & More ultimateimagetool versions up to 2.1.02 Description The issue allows a guest to download personal information without restriction by performing a path traversal attack. This can be exploited i...