CVE-2014-125061 | Medium | 5.5 | 2023-01-07 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the function select_transfer… |
CVE-2021-41672 | Medium | 6.5 | 2022-06-15 | PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can inject a malicious… |
CVE-2021-37593 | Critical | 9.1 | 2021-07-30 | PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQL query in order to affect the executio… |
CVE-2021-27190 | Medium | 5.4 | 2021-02-12 | A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input contain… |
CVE-2019-20178 | Medium | 6.5 | 2020-01-09 | Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user. |
CVE-2018-20848 | High | 8.8 | 2019-06-30 | Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] par… |
CVE-2018-1000887 | Medium | 4.8 | 2018-12-28 | Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injecting java script co… |
CVE-2012-5227 | | | 2012-10-01 | SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter. |
CVE-2012-5226 | | | 2012-10-01 | Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) motc… |
CVE-2008-6892 | | | 2009-08-03 | SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. NOTE: this might… |
CVE-2008-1507 | | | 2008-03-25 | PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, whi… |
CVE-2008-1506 | | | 2008-03-25 | PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo functi… |
CVE-2008-1496 | | | 2008-03-25 | Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter… |
CVE-2008-1495 | | | 2008-03-25 | Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and… |
CVE-2005-3572 | | | 2005-11-16 | SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. |
CVE-2002-2134 | | | 2002-12-31 | haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that c… |