Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

spreecommerce spree 1.3.0 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2013-2506
app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x prior to 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves.
Spreecommerce Spree 1.1.1Spreecommerce Spree 1.1.3Spreecommerce Spree 1.2.1Spreecommerce Spree 1.2.3Spreecommerce Spree 1.1.4Spreecommerce Spree 1.1.5Spreecommerce Spree 1.1.6Spreecommerce Spree 1.2.0Spreecommerce Spree 1.3.0Spreecommerce Spree 1.3.1Spreecommerce Spree 1.3.2Spreecommerce Spree 1.1.0Spreecommerce Spree 1.1.2Spreecommerce Spree 1.2.2Spreecommerce Spree 1.2.4
4.3
CVSSv2
CVE-2013-1656
Spree Commerce 1.0.x up to and including 1.3.2 allows remote authenticated administrators to instantiate arbitrary Ruby objects and execute arbitrary commands via the (1) payment_method parameter to core/app/controllers/spree/admin/payment_methods_controller.rb; and the (2) promo...
Spreecommerce Spree 1.0.5Spreecommerce Spree 1.0.7Spreecommerce Spree 1.1.6Spreecommerce Spree 1.2.1Spreecommerce Spree 1.3.1Spreecommerce Spree 1.0.0Spreecommerce Spree 1.0.1Spreecommerce Spree 1.0.2Spreecommerce Spree 1.0.3Spreecommerce Spree 1.2.2Spreecommerce Spree 1.2.3Spreecommerce Spree 1.2.4Spreecommerce Spree 1.3.0Spreecommerce Spree 1.1.0Spreecommerce Spree 1.1.1Spreecommerce Spree 1.1.2Spreecommerce Spree 1.1.3Spreecommerce Spree 1.1.4Spreecommerce Spree 1.0.4Spreecommerce Spree 1.0.6Spreecommerce Spree 1.1.5Spreecommerce Spree 1.2.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook