PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection vulnerability found in the PrestaShop paypal module from release from 3.12.0 to and including 3.16.3 allow a remote attacker to gain privileges, modify data, and potentially affect system availability. The cause of this issue is that SQL queries were being constructed with user input which had not been properly filtered. Only deployments on PrestaShop 1.6 are affected.
Номер модели WSD-133-C Происхождение Китай Стиль Повседневный Тип товара Кварцевые наручные часы Возможности Секундомер с остановом Возможности Ударопрочный Возможности Luminous Возможности Автоматическая настройка времени Возможности Хронограф Возможности Полный календарь Возможности Фаза луны Возможности Водонепроницаемый Возможности Плавать Возможности luminous hands Механизм QUARTZ Диаметр циферблата 42 Материал корпуса Нержавеющая сталь Тип материала окошка циферблата Хардлекс Форма корпуса […]
Shoppingfeed PrestaShop is an add-on to the PrestaShop ecommerce platform to synchronize data. The module Shoppingfeed for PrestaShop is vulnerable to SQL injection between version 1.4.0 and 1.8.2 due to a lack of input sanitization. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this issue.
SQL injection vulnerability in the City Autocomplete (cityautocomplete) module from ebewe.net for PrestaShop, prior to version 1.8.12 (for PrestaShop version 1.5/1.6) or prior to 2.0.3 (for PrestaShop version 1.7), allows remote attackers to execute arbitrary SQL commands via the type, input_name. or q parameter in the autocompletion.php front controller.