prestashop prestashop 1.5.5.0 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module

Prestashop Prestashop 1.5.5.0

9

CVSSv2

PrestaShop 1.5.5 allows remote authenticated malicious users to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory.

Prestashop Prestashop 1.5.5.0

6.4

CVSSv2

In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is fixed in 1.7.6.5.

Prestashop Prestashop

4.3

CVSSv2

In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7.6.5

Prestashop Prestashop

7.5

CVSSv2

modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 up to and including 1.7.2.5 allows remote malicious users to execute arbitrary PHP code via the code parameter.

Responsive Mega Menu Pro Project Responsive Mega Menu Pro 1.0.32 Prestashop Prestashop

7.5

CVSSv2

modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 up to and including 1.7.2.5 allows remote malicious users to execute a SQL Injection through function calls in the code parameter.

Responsive Mega Menu Pro Project Responsive Mega Menu Pro 1.0.32 Prestashop Prestashop

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook