EUVD-2023-47558

Malicious code in bioql PyPI...

CVE-2023-45256: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow remote attackers to execute arbitrary SQL commands via the TPE, societe, MAC, reference, or aliascb parameter to transaction.php, validation.php, or callback.php...

CVE-2024-54819

I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery SSRF due to improper input validation in classes/security/validation.php...

CVE-2024-54819: Server-Side Request Forgery (SSRF)

I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery SSRF due to improper input validation in classes/security/validation.php...

PT-2024-36424 · I · I

Name of the Vulnerable Software and Affected Versions: I, Librarian versions prior to 5.11.1 Description: The issue is related to Server-Side Request Forgery SSRF due to improper input validation in classes/security/validation.php. This allows for bypassing protection mechanisms. The estimated...

CVE-2023-43139

An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/validation.php components...

CVE-2023-43139

An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/validation.php components...

CVE-2023-43139

An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/validation.php components...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in Prestashop franfinance prior to version v.2.0.27, which stems from the ability to...

CVE-2023-43139

Summary: CVE-2023-43139 affects franfinance prior to v2.0.27 (PrestaShop integration). The vulnerability allows a remote attacker to execute arbitrary code via the validation.php and controllers/front/validation.php components. The NVD records a CVSSv3.1 base score of 9.8 (CRITICAL) with network ...

CVE-2023-43139: Improper Neutralization of Special Elements used in an OS Command

An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/validation.php components...