Presto Changeo

presto-changeo

4 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Testsitecreator

testsitecreator

Test Site Creator

test_site_creator

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-43983 1Presto Changeo 1Attribute Grid Jun 17, 2026 Oct 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disable_json.php.
CVE-2023-43981 1Presto Changeo 1Test Site Creator Jun 17, 2026 Oct 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Presto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization vulnerability via the component delete_excluded_folder.php.
CVE-2023-43980 1Presto Changeo 1Testsitecreator Jun 17, 2026 Oct 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disable_json.php.
CVE-2012-5799 2Prestashop Presto Changeo 2Canadapost Prestashop Apr 29, 2026 Nov 4, 2012 N/A· v4 N/A· v3 5.8 MEDIUM· v2 The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in...Show more The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function.Show less