Tshirtecommerce vulnerabilities
We track 4 vulnerabilities in Tshirtecommerce products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 1, 2023.
Latest Tshirtecommerce vulnerabilities
- 7.5 High severity
Custom Product Designer: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter type in the /tshirtecommerce/fonts.php endpoint, to allow a remote attacker to traverse directori
- 7.5 High severity
Custom Product Designer: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter file_name in the tshirtecommerce/ajax.php?type=svg endpoint, to allow a remote attacker to traver
- 9.8 Critical severity
Custom Product Designer: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised tshirtecommerce_design_cart_id GET parameter in order to exploit an insecure parameter in the function
- 9.8 Critical severity
Custom Product Designer: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised product_id GET parameter in order to exploit an insecure parameter in the front controller file design