Search
Search Results (68 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-13784 | 1 Prestashop | 1 Prestashop | 2024-11-21 | N/A |
| PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php. | ||||
| CVE-2018-10942 | 2 Attribute Wizard Project, Prestashop | 2 Attribute Wizard, Prestashop | 2024-11-21 | N/A |
| modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file. | ||||
| CVE-2013-6358 | 1 Prestashop | 1 Prestashop | 2024-11-21 | 8.8 High |
| PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory. | ||||
| CVE-2013-6295 | 1 Prestashop | 1 Prestashop | 2024-11-21 | 9.8 Critical |
| PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module | ||||
| CVE-2013-4792 | 1 Prestashop | 1 Prestashop | 2024-11-21 | 5.5 Medium |
| PrestaShop before 1.4.11 allows logout CSRF. | ||||
| CVE-2013-4791 | 1 Prestashop | 1 Prestashop | 2024-11-21 | 5.4 Medium |
| PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE. | ||||
| CVE-2012-2517 | 1 Prestashop | 1 Prestashop | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web script or HTML via the index of the product[] parameter to ajax.php. | ||||
| CVE-2012-20001 | 1 Prestashop | 1 Prestashop | 2024-11-21 | 6.1 Medium |
| PrestaShop before 1.5.2 allows XSS via the "<object data='data:text/html" substring in the message field. | ||||