CVE-2020-15081: information disclosure in PrestaShop — uploads directory
PrestaShop and CVE-2020-15081: a practical explanation of information disclosure in uploads directory, real-world impact…
// category
PrestaShop Security
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2020-5286: cross-site scripting (XSS) in PrestaShop — import page
PrestaShop and CVE-2020-5286: a practical explanation of cross-site scripting (XSS) in import page, real-world impact, affected…
CVE-2020-5287: access-control weakness in PrestaShop — back-office customer search
PrestaShop and CVE-2020-5287: a practical explanation of access-control weakness in back-office customer search, real-world…
CVE-2020-5288: access-control weakness in PrestaShop — product attributes page
PrestaShop and CVE-2020-5288: a practical explanation of access-control weakness in product attributes page, real-world impact…
CVE-2020-5293: access-control weakness in PrestaShop — combinations, attachments and specific prices
PrestaShop and CVE-2020-5293: a practical explanation of access-control weakness in combinations, attachments and specific…
CVE-2020-5271: cross-site scripting (XSS) in PrestaShop — dashboard calendar
PrestaShop and CVE-2020-5271: a practical explanation of cross-site scripting (XSS) in dashboard calendar, real-world impact…
CVE-2020-5272: cross-site scripting (XSS) in PrestaShop — back-office search
PrestaShop and CVE-2020-5272: a practical explanation of cross-site scripting (XSS) in back-office search, real-world impact…
CVE-2020-5276: cross-site scripting (XSS) in PrestaShop — AdminCarts page
PrestaShop and CVE-2020-5276: a practical explanation of cross-site scripting (XSS) in AdminCarts page, real-world impact…
CVE-2020-5278: cross-site scripting (XSS) in PrestaShop — exception page
PrestaShop and CVE-2020-5278: a practical explanation of cross-site scripting (XSS) in exception page, real-world impact…
CVE-2020-5279: access-control weakness in PrestaShop — back-office action authorization
PrestaShop and CVE-2020-5279: a practical explanation of access-control weakness in back-office action authorization, real-world…