storecommander records

3 published records for vendor storecommander.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-33278No exploit	In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP requesstorecommander · customers export · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	May 25, 2023
39Monitor	CVE-2023-33280No exploit	In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTstorecommander · quickaccounting · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	May 25, 2023
26Monitor	CVE-2023-30281No exploit	Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commstorecommander · scquickaccounting · CWE-276	Medium6.5	—	0.5%	May 16, 2023

CVE-2023-33278
39Monitor
In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP reques
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
storecommander · customers exportMay 25, 2023
CVE-2023-33280
39Monitor
In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HT
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
storecommander · quickaccountingMay 25, 2023
CVE-2023-30281
26Monitor
Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Comm
MediumCVSS 6.5No exploitEPSS 0%
storecommander · scquickaccountingMay 16, 2023