PE
Vendor
Peel
15
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-41672 | PS Peel Shopping Peel | 6.5 | Jun 15 | PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php |
| CVE-2021-37593 | PS Peel Shopping Peel | 9.1 | Jul 30 | PEEL Shopping version 9.4.0 allows remote SQL injection |
| CVE-2021-27190 | PS Peel Shopping Peel | 5.4 | Feb 12 | A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available |
| CVE-2019-20178 | PS Peel Shopping Peel | 6.5 | Jan 9 | Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user |
| CVE-2018-20848 | PS Peel Shopping Peel | 8.8 | Jun 30 | Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter |
| CVE-2018-1000887 | PS Peel Shopping Peel | 4.8 | Dec 28 | Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injecting java script code in the "Site Name… |
| CVE-2012-5227 | PS Peel Shopping Peel | – | Oct 1 | SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter |
| CVE-2012-5226 | PS Peel Shopping Peel | – | Oct 1 | Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) motclef parameter to… |
| CVE-2008-6892 | PE Peel Peel | – | Aug 3 | SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter |
| CVE-2008-1507 | PE Peel Peel | – | Mar 25 | PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, which allows remote… |
| CVE-2008-1506 | PE Peel Peel | – | Mar 25 | PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function |
| CVE-2008-1496 | PE Peel Peel | – | Mar 25 | Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to (a) membre.php,… |
| CVE-2008-1495 | PE Peel Peel | – | Mar 25 | Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary… |
| CVE-2005-3572 | PE Peel Peel | – | Nov 16 | SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter |
| CVE-2002-2134 | PE Peel Peel | – | Dec 31 | haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in… |