Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2012-6641

Cross-site scripting (XSS) vulnerability in redirect.php in the Socolissimo module (modules/socolissimo/) in PrestaShop before 1.4.7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to "parameter names and values."

  • Published: Apr 7, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-6641
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
prestashop / prestashop 1.4.0.6 1.4.0.6.x
prestashop / prestashop 1.4.0.10 1.4.0.10.x
prestashop / prestashop 1.4.1.0 1.4.1.0.x
prestashop / prestashop 1.4.0.16 1.4.0.16.x
prestashop / prestashop 1.4.0.3 1.4.0.3.x
prestashop / prestashop 1.4.4.1 1.4.4.1.x
prestashop / prestashop 1.4.0.7 1.4.0.7.x
prestashop / prestashop - 1.4.7.1.x
prestashop / prestashop 1.4.3.0 1.4.3.0.x
prestashop / prestashop 1.4.0.13 1.4.0.13.x
prestashop / prestashop 1.4.0.5 1.4.0.5.x
prestashop / prestashop 1.4.2.5 1.4.2.5.x
prestashop / prestashop 1.4.0.12 1.4.0.12.x
prestashop / prestashop 1.4.5.1 1.4.5.1.x
prestashop / prestashop 1.4.6.2 1.4.6.2.x
prestashop / prestashop 1.4.0.8 1.4.0.8.x
prestashop / prestashop 1.4.0.1 1.4.0.1.x
prestashop / prestashop 1.4.0.15 1.4.0.15.x
prestashop / prestashop 1.4.7.0 1.4.7.0.x
prestashop / prestashop 1.4.0.4 1.4.0.4.x
prestashop / prestashop 1.4.2.4 1.4.2.4.x
prestashop / prestashop 1.4.6.1 1.4.6.1.x
prestashop / prestashop 1.4.0.17 1.4.0.17.x
prestashop / prestashop 1.4.0.11 1.4.0.11.x
prestashop / prestashop 1.4.0.2 1.4.0.2.x
prestashop / prestashop 1.4.4.0 1.4.4.0.x
prestashop / prestashop 1.4.0.9 1.4.0.9.x
prestashop / prestashop 1.4.0.14 1.4.0.14.x