Browse CVEs

MEDIUM 6.5 CVE-2021-41672 PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can inject a… Peel Shopping No fix yet Fix from $1,6002022-06-15 CRITICAL 9.1 CVE-2021-37593EPSS 5% PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQL query in order to affect th… Peel Shopping No fix yet Fix from $2,3002021-07-30 MEDIUM 5.4 CVE-2021-27190 A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied inp… Peel Shopping Patch available Fix from $1,6002021-02-12 MEDIUM 6.5 CVE-2019-20178 Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user. Peel Shopping Mitigation only Fix from $1,6002020-01-09 HIGH 8.8 CVE-2018-20848 Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleu… Peel Shopping No fix yet Fix from $1,9502019-06-30 HIGH 7.5 CVE-2012-5227 SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id … Peel Shopping No fix yet Fix from $1,9502012-10-01 HIGH 7.5 CVE-2008-6892 SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. NOTE: t… Peel No fix yet Fix from $1,9502009-08-03 HIGH 7.5 CVE-2008-1507 PEEL, possibly 3.x and earlier, has (1) a default [email protected] account with password admin, and (2) a default [email protected] account with password c… Peel after 3.0 Fix from $1,9502008-03-25 MEDIUM 5.0 CVE-2008-1506 PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpi… Peel after 3.0 Fix from $1,6002008-03-25 HIGH 7.5 CVE-2008-1496 Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email … Peel No fix yet Fix from $1,9502008-03-25 MEDIUM 6.5 CVE-2008-1495 Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to u… Peel No fix yet Fix from $1,6002008-03-25 HIGH 7.5 CVE-2005-3572 SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. Peel Mitigation only Fix from $1,9502005-11-16 MEDIUM 5.0 CVE-2002-2134 haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web ser… Peel Patch available Fix from $1,6002002-12-31