Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PrestaShop Correos Express 信息泄露漏洞
Vulnerability Description
PrestaShop是美国PrestaShop公司的一套开源的电子商务解决方案。该方案提供多种支付方式、短消息提醒和商品图片缩放等功能。Correos Express是其中的一个物流管理插件。 PrestaShop 1.6版本至1.7版本中的Correos Express存在安全漏洞。远程攻击者可利用该漏洞获取敏感信息（例如：密码）并可能检索有关订单或买家信息。
CVSS Information
N/A
Vulnerability Type
N/A