İçeriğe atla
Noroxi

PrestaShop kayıtları

prestashop üreticisine ait 142 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
19
Düzeltme kaydı olan
%52,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

142 kayıt
  • CVE-2018-8823
    54Planlayın

    modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 thro

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    prestashop · prestashop27 Mar 2018

  • CVE-2023-30194
    49Planlayın

    Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    prestashop · poststaticfooter10 May 2023

  • CVE-2018-19126
    46Planlayın

    PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload.

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    prestashop · prestashop9 Kas 2018

  • CVE-2021-3110
    45Planlayın

    The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_pro

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    prestashop · prestashop20 Oca 2021

  • CVE-2023-30149
    44Planlayın

    SQL injection vulnerability in the City Autocomplete (cityautocomplete) module from ebewe.net for PrestaShop, prior to version 1.8.12 (for P

    KritikCVSS 9,8İstismar yokEPSS %16

    ebewe · city autocomplete2 Haz 2023

  • CVE-2018-10942
    43Planlayın

    modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attacke

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    prestashop · prestashop9 May 2018

  • CVE-2022-31101
    42Planlayın

    SQL Injection in prestashop/blockwishlist

    YüksekCVSS 8,8Kavram kanıtıEPSS %23

    prestashop · blockwishlist27 Haz 2022

  • CVE-2020-15160
    42Planlayın

    Blind SQL Injection in PrestaShop

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    prestashop · prestashop24 Eyl 2020

  • CVE-2024-34716
    41Planlayın

    PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

    OrtaCVSS 6,1Kavram kanıtıEPSS %56

    prestashop · prestashop14 May 2024

  • CVE-2018-13784
    41Planlayın

    PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.

    KritikCVSS 9,1Kavram kanıtıEPSS %16

    prestashop · prestashop9 Tem 2018

  • CVE-2022-31181
    41Planlayın

    Remote code execution in prestashop

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    prestashop · prestashop1 Ağu 2022

  • CVE-2021-43789
    40Planlayın

    Blind SQLi using Search filters in PrestaShop

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    prestashop · prestashop7 Ara 2021

  • CVE-2019-19594
    40Planlayın

    reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers t

    KritikCVSS 9,8İstismar yokEPSS %3

    adobe · stock api integration5 Ara 2019

  • CVE-2019-19595
    40Planlayın

    reset/modules/advanced_form_maker_edit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote

    KritikCVSS 9,8İstismar yokEPSS %3

    adobe · stock api integration5 Ara 2019

  • CVE-2018-19355
    40Planlayın

    modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to

    KritikCVSS 9,8İstismar yokEPSS %3

    prestashop · prestashop18 Kas 2018

  • CVE-2023-30192
    40Planlayın

    Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find().

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    prestashop · possearchproducts11 May 2023

  • CVE-2013-6295
    40Planlayın

    PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module

    KritikCVSS 9,8İstismar yokEPSS %2

    prestashop · prestashop18 Şub 2020

  • CVE-2022-21686
    40Planlayın

    Server Side Twig Template Injection in PrestaShop

    KritikCVSS 9,8İstismar yokEPSS %1

    prestashop · prestashop26 Oca 2022

  • CVE-2020-4074
    40Planlayın

    Improper Authentication

    KritikCVSS 9,8İstismar yokEPSS %1

    prestashop · prestashop2 Tem 2020

  • CVE-2023-39526
    40Planlayın

    PrestaShopSQL manager vulnerability (potential RCE)

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    prestashop · prestashop7 Ağu 2023

  • CVE-2008-5791
    40Planlayın

    Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and attack vector

    KritikCVSS 10,0İstismar yokEPSS %1

    prestashop · prestashop31 Ara 2008

  • CVE-2023-50029
    40Planlayın

    PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    24 Haz 2024

  • CVE-2024-36679
    40Planlayın

    In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can perform PHP Code injection.

    KritikCVSS 10,0İstismar yokEPSS %0

    19 Haz 2024

  • CVE-2024-34990
    40Planlayın

    In the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop, a customer ca

    KritikCVSS 10,0İstismar yokEPSS %0

    19 Haz 2024

  • CVE-2018-8824
    39İzleyin

    modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 thro

    KritikCVSS 9,8İstismar yokEPSS %1

    prestashop · prestashop9 May 2018