Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 255
Reset filtersImproper neutralization of SQL parameter in Prestaeg - CDesigner module for PrestaShop
Improper Limitation of a Pathname to a Restricted Directory in Webbax - Custom Exporter module for PrestaShop
Improper neutralization of SQL parameter in PosThemes - Search Products for PrestaShop
Improper neutralization of SQL parameter in Posthemes - Static Footer module for PrestaShop
Exposure of Private Personal Information to an Unauthorized Actor in SC Quick Accounting module for PrestaShop
Exposure of Private Personal Information to an Unauthorized Actor in SC Export Customers module for PrestaShop
Improper neutralization of SQL parameter in Posthemes - Static Blocks module for PrestaShop
Improper neutralization of a SQL parameter in askforaquote module for PrestaShop
Improper neutralization of a SQL parameter in bdroppy module for PrestaShop
Improper neutralization of SQL parameter in leurlrewrite for PrestaShop
Improper neutralization of SQL parameter in Idnovate - AdvancedPopupCreator module for PrestaShop
Unrestricted Upload of File with Dangerous Type in Cdesigner module for PrestaShop
Improper neutralization of SQL parameter in lgbudget module for PrestaShop
Improper neutralization of SQL parameter in PayPal module for PrestaShop 1.6 and 1.5
[CVE-2023-27640][CWE-22] Multiple path traversal in Custom Product Designer (tshirtecommerce) module for PrestaShop
Improper neutralization of SQL parameter in faqs module for PrestaShop
Improper neutralization of multiple SQL parameters in the xipblog module for PrestaShop
[CVE-2023-27638][CWE-89] Improper neutralization of SQL parameters in module PrestaShop Custom Product Designer (tshirtecommerce) for PrestaShop
-[CVE-2023-27570] Improper neutralization of SQL parameters in Profileo : Tracking et Conversions (eo_tags) module for PrestaShop
Multiple improper neutralization of SQL parameters in ws_productreviews module for PrestaShop
Blind SQL injection vulnerability in Jms Theme Layout (jmsthemelayout) PrestaShop module
Unrestricted upload vulnerability in Jms Slider (jmsslider) PrestaShop module
Blind SQL injection vulnerability in Jms Page Builder (jmspagebuilder) PrestaShop module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.