Crítica
CVE-2023-36263
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 255
Restablecer filtros
Crítica
CVE-2023-43139
Improper Neutralization of Special Elements used in an OS Command in the Franfinance module for PrestaShop
Crítica
CVE-2023-46358
Improper neutralization of SQL parameter in Snegurka - Referral and Affiliation Program module for PrestaShop
Crítica
CVE-2023-46347
Improper neutralization of SQL parameter in NDK Design - Step by Step products Pack module for PrestaShop
Alta
CVE-2023-46346
Improper Limitation of a Pathname to a Restricted Directory in MyPrestaModules - Product Catalog (CSV, Excel, XML) Export PRO module for PrestaShop
Crítica
CVE-2023-45376
Improper neutralization of SQL parameter in HiPresta - Carousels Pack - Instagram, Products, Brands, Supplier module for PrestaShop
Crítica
CVE-2023-45381
Improper neutralization of SQL parameter in WebshopWorks Creative Popup module for PrestaShop
Crítica
CVE-2023-43986
Improper neutralization of SQL parameter in DM Concept - Advanced configurator for customized product module for PrestaShop
Crítica
CVE-2023-45384
Unrestricted Upload of File with Dangerous Type in KnowBand - One Page Checkout, Social Login & Mailchimp module for PrestaShop
Alta
CVE-2023-45383
Improper Limitation of a Pathname to a Restricted Directory in Common-Services - Sonice Etiquetage module for PrestaShop
Crítica
CVE-2023-45379
Improper neutralization of SQL parameter in Posthemes Rotator Img module for PrestaShop
Crítica
CVE-2023-45375
Improper neutralization of SQL parameter in 01generator.com - PireosPay module for PrestaShop
Crítica
CVE-2023-45386
Improper neutralization of SQL parameter in MyPresta.eu - Product Extra Tabs Pro for PrestaShop
Crítica
CVE-2023-37824
Improper neutralization of SQL parameters in the Sitolog Application Connect module from Sitolog for PrestaShop
Media
CVE-2023-30148
Multiple cross-site scripting (XSS) vulnerabilities in the Multi html block (opartmultihtmlblock) module and multihtmlblock* sub-modules from Opart for PrestaShop
Crítica
CVE-2023-30154
Improper neutralization of SQL parameters in AfterMail (aftermailpresta) module from Shoprunners for PrestaShop
Crítica
CVE-2023-44024
Improper neutralization of SQL parameters in KnowBand - One Page Checkout, Social Login & Mailchimp module for PrestaShop
Crítica
CVE-2023-40920
Improper neutralization of an SQL parameter in prixanconnect module for PrestaShop
Crítica
CVE-2023-43981
Deserialization of Untrusted Data in Presto Changeo - Test Site Creator module for PrestaShop
Crítica
CVE-2023-43983
Improper neutralization of SQL parameter in Presto Changeo - Attribute Grid module for PrestaShop
Media
CVE-2023-43663
PrestaShop allows users to uninstall modules from backoffice, even with low rights
Media
CVE-2023-43664
PrestaShop allows employee without any access rights to list all installed modules
Crítica
CVE-2023-43980
Improper neutralization of SQL parameter in Presto Changeo - Test Site Creator module for PrestaShop
Crítica
CVE-2023-39648
Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.