Vulnerabilities > Themevolty

DATE CVE VULNERABILITY TITLE RISK
2023-10-31 CVE-2023-27846 SQL Injection vulnerability in Themevolty Theme Volty CMS Blog 4.0.1
SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog, tvcmsvideotab, tvcmswishlist, tvcmsbrandlist, tvcmscategorychainslider, tvcmscategoryproduct, tvcmscategoryslider, tvcmspaymenticon, tvcmstestimonial components.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8
2023-10-03 CVE-2023-39647 SQL Injection vulnerability in Themevolty Theme Volty CMS Category Product 4.0.1
Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8
2023-10-03 CVE-2023-39646 SQL Injection vulnerability in Themevolty Theme Volty CMS Category Chain Slider 4.0.1
Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8
2023-10-03 CVE-2023-39648 SQL Injection vulnerability in Themevolty Theme Volty CMS Testimonial 4.0.1
Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8
2023-10-03 CVE-2023-39649 SQL Injection vulnerability in Themevolty Theme Volty CMS Category Slider 4.0.1
Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8
2023-10-03 CVE-2023-39651 SQL Injection vulnerability in Themevolty Theme Volty CMS Brandlist 4.0.1
Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tvcmsbrandlist) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8
2023-10-03 CVE-2023-39645 SQL Injection vulnerability in Themevolty CMS Payment Icon 4.0.1
Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8
2023-08-28 CVE-2023-39650 SQL Injection vulnerability in Themevolty Theme Volty CMS Blog
Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8
2023-08-28 CVE-2023-39652 SQL Injection vulnerability in Themevolty Theme Volty Video TAB
theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run().
network
low complexity
themevolty CWE-89
critical
 9.8
9.8