Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2023-33663
Disclosure Date: August 16, 2023 (last updated October 08, 2023)
In the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for PrestaShop, an attacker can perform SQL injection up to 0.2.0. Release 0.2.1 fixed this security issue.
0
Attacker Value
Unknown
CVE-2023-33665
Disclosure Date: August 04, 2023 (last updated October 08, 2023)
ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.
0
Attacker Value
Unknown
CVE-2023-33666
Disclosure Date: August 03, 2023 (last updated October 08, 2023)
ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.
0
Attacker Value
Unknown
CVE-2023-33664
Disclosure Date: July 07, 2023 (last updated October 08, 2023)
ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.
0
Attacker Value
Unknown
CVE-2014-5561
Disclosure Date: September 09, 2014 (last updated October 05, 2023)
The Word Search Free (aka air.wordSearchFree) application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
