Webbax vulnerabilities
We track 3 vulnerabilities in Webbax products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 30, 2024.
Latest Webbax vulnerabilities
- 9.8 Critical severity
supernewsletter: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the product_search.php components.
- 7.5 High severity
supernewsletter: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information.
- 7.5 High severity
Myinventory: Improper Limitation of a Pathname to a Restricted Directory
Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack.