critical9.8
CVE-2023-45384
KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type.
Impact
KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" (supercheckout), a guest can upload files with extensions .php
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Knowband | Supercheckout | from 5.0.7 before 6.0.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://addons.prestashop.com/fr/processus-rapide-commande/18016-one-page-checkout-social-login-mailchimp.html
- https://security.friendsofpresta.org/modules/2023/10/17/supercheckout.html
- https://addons.prestashop.com/fr/processus-rapide-commande/18016-one-page-checkout-social-login-mailchimp.html
- https://security.friendsofpresta.org/modules/2023/10/17/supercheckout.html