Store-opart vulnerabilities
We track 4 vulnerabilities in Store-opart products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 27, 2023.
Latest Store-opart vulnerabilities
- 9.8 Critical severity
Op'art Devis: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script to the getModuleTranslation function.
- 9.8 Critical severity
Op'art Limit Quantity: Improper Neutralization of Special Elements used in an SQL Command
Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection. OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAlertMessage()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL
- 9.8 Critical severity
Op'art Product Faq: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector.
- 9.8 Critical severity
Op'art Save Cart: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail()