{"vulnerability": "CVE-2023-4538", "sightings": [{"uuid": "17dc563b-04a3-4bd1-bee0-0c30067bc5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45381", "type": "seen", "source": "https://t.me/cibsecurity/72597", "content": "\u203c CVE-2023-45381 \u203c\n\nIn the module \"Creative Popup\" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via `cp_download_popup().`\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T22:34:37.000000Z"}, {"uuid": "d387608c-63ef-4cc4-ad71-edab24fad1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45384", "type": "seen", "source": "https://t.me/cibsecurity/72567", "content": "\u203c CVE-2023-45384 \u203c\n\nKnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module \"Module One Page Checkout, Social Login & Mailchimp\" (supercheckout), a guest can upload files with extensions .php\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T16:40:40.000000Z"}, {"uuid": "bee68e40-c3a1-4fa5-b56f-805f11c7bb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4538", "type": "seen", "source": "https://t.me/ctinow/185390", "content": "https://ift.tt/fr5hSsw\nCVE-2023-4538", "creation_timestamp": "2024-02-15T10:25:22.000000Z"}]}