Skip to content
Noroxi

peel records

15 published records for vendor peel.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2021-37593
    38Monitor

    PEEL Shopping version 9.4.0 allows remote SQL injection.

    CriticalCVSS 9.1Proof of conceptEPSS 5%

    peel · peel shoppingJul 30, 2021

  • CVE-2018-20848
    35Monitor

    Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in t

    HighCVSS 8.8No exploitEPSS 0%

    peel · peel shoppingJun 30, 2019

  • CVE-2008-1507
    31Monitor

    PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with p

    HighCVSS 7.5Proof of conceptEPSS 2%

    peel · peelMar 25, 2008

  • CVE-2008-6892
    31Monitor

    SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter.

    HighCVSS 7.5Proof of conceptEPSS 2%

    peel · peelAug 3, 2009

  • CVE-2005-3572
    30Monitor

    SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid par

    HighCVSS 7.5No exploitEPSS 1%

    peel · peelNov 16, 2005

  • CVE-2008-1496
    30Monitor

    Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (

    HighCVSS 7.5Proof of conceptEPSS 1%

    peel · peelMar 25, 2008

  • CVE-2012-5227
    30Monitor

    SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands vi

    HighCVSS 7.5Proof of conceptEPSS 1%

    peel · peel shoppingOct 1, 2012

  • CVE-2008-1495
    27Monitor

    Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administra

    MediumCVSS 6.5Proof of conceptEPSS 2%

    peel · peelMar 25, 2008

  • CVE-2021-41672
    26Monitor

    PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php.

    MediumCVSS 6.5No exploitEPSS 1%

    peel · peel shoppingJun 15, 2022

  • CVE-2019-20178
    26Monitor

    Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.

    MediumCVSS 6.5No exploitEPSS 0%

    peel · peel shoppingJan 9, 2020

  • CVE-2008-1506
    21Monitor

    PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls

    MediumCVSS 5.0Proof of conceptEPSS 2%

    peel · peelMar 25, 2008

  • CVE-2002-2134
    21Monitor

    haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remot

    MediumCVSS 5.0Proof of conceptEPSS 2%

    peel · peelDec 31, 2002

  • CVE-2021-27190
    21Monitor

    A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available.

    MediumCVSS 5.4Proof of conceptEPSS 1%

    peel · peel shoppingFeb 11, 2021

  • CVE-2018-1000887
    19Monitor

    Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injec

    MediumCVSS 4.8No exploitEPSS 0%

    peel · peel shoppingDec 28, 2018

  • CVE-2012-5226
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HT

    MediumCVSS 4.3Proof of conceptEPSS 1%

    peel · peel shoppingOct 1, 2012