Webbax records

8 published records for vendor webbax.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-33275No exploit	SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super NewsCWE-89 Pre-auth SQL injection	Critical9.8	—	0.7%	Apr 30, 2024
39Monitor	CVE-2023-31671No exploit	PrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess().webbax · postfinance · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Jun 14, 2023
32Monitor	CVE-2023-30198Proof of concept	Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php.webbax · winbizpayment · CWE-22 Pre-auth Path traversal	High7.5	—	5.5%	Jun 12, 2023
30Monitor	CVE-2023-30197No exploit	Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest to download personalwebbax · myinventory · CWE-22 Pre-auth Path traversal	High7.5	—	0.7%	May 30, 2023
30Monitor	CVE-2023-30199No exploit	Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php.webbax · customexporter · CWE-22 Pre-auth Path traversal	High7.5	—	0.7%	May 19, 2023
30Monitor	CVE-2023-30196No exploit	Prestashop salesbooster <= 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php.webbax · salesbooster · CWE-22 Pre-auth Path traversal	High7.5	—	0.5%	May 30, 2023
30Monitor	CVE-2024-25839No exploit	An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attackwebbax · super newsletter · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Mar 3, 2024
19Monitor	CVE-2023-3031No exploit	Prestahop module King-Avis - Path traversalwebbax · king-avis · CWE-22 Path traversal	Medium4.9	—	0.8%	Jun 2, 2023

CVE-2024-33275
39Monitor
SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super News
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
Apr 30, 2024
CVE-2023-31671
39Monitor
PrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess().
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
webbax · postfinanceJun 14, 2023
CVE-2023-30198
32Monitor
Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php.
HighCVSS 7.5Proof of conceptEPSS 6%
- Pre-auth
- Path traversal
webbax · winbizpaymentJun 12, 2023
CVE-2023-30197
30Monitor
Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest to download personal
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
webbax · myinventoryMay 30, 2023
CVE-2023-30199
30Monitor
Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
webbax · customexporterMay 19, 2023
CVE-2023-30196
30Monitor
Prestashop salesbooster <= 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
webbax · salesboosterMay 30, 2023
CVE-2024-25839
30Monitor
An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attack
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
webbax · super newsletterMar 3, 2024
CVE-2023-3031
19Monitor
Prestahop module King-Avis - Path traversal
MediumCVSS 4.9No exploitEPSS 1%
- Path traversal
webbax · king-avisJun 2, 2023