CVE-2023-39530: unauthorized file access in PrestaShop — CustomerMessage API
PrestaShop and CVE-2023-39530: a practical explanation of unauthorized file access in CustomerMessage API, real-world impact…
// category
PrestaShop Security
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2023-39529: unauthorized file access in PrestaShop — attachments API
PrestaShop and CVE-2023-39529: a practical explanation of unauthorized file access in attachments API, real-world impact…
CVE-2023-39528: unauthorized file access in PrestaShop — displayAjaxEmailHTML
PrestaShop and CVE-2023-39528: a practical explanation of unauthorized file access in displayAjaxEmailHTML, real-world impact…
CVE-2023-39527: cross-site scripting (XSS) in PrestaShop — Validate::isCleanHTML
PrestaShop and CVE-2023-39527: a practical explanation of cross-site scripting (XSS) in Validate::isCleanHTML, real-world…
CVE-2023-39526: remote code execution in PrestaShop — back-office SQL Manager
PrestaShop and CVE-2023-39526: a practical explanation of remote code execution in back-office SQL Manager, real-world impact…
CVE-2023-39525: unauthorized file access in PrestaShop — import-file deletion
PrestaShop and CVE-2023-39525: a practical explanation of unauthorized file access in import-file deletion, real-world impact…
CVE-2023-39524: SQL injection in PrestaShop — back-office product search field
PrestaShop and CVE-2023-39524: a practical explanation of SQL injection in back-office product search field, real-world impact…
CVE-2023-30839: SQL injection in PrestaShop — SQL Manager filtering
PrestaShop and CVE-2023-30839: a practical explanation of SQL injection in SQL Manager filtering, real-world impact, affected…
CVE-2023-30838: cross-site scripting (XSS) in PrestaShop — ValidateCore::isCleanHTML and CSS events
PrestaShop and CVE-2023-30838: a practical explanation of cross-site scripting (XSS) in ValidateCore::isCleanHTML and CSS…
CVE-2023-30545: information disclosure in PrestaShop — SQL Manager and LOAD_FILE
PrestaShop and CVE-2023-30545: a practical explanation of information disclosure in SQL Manager and LOAD_FILE, real-world…