Lucene search

MitreCVE-2023-34575

HistorySep 20, 2023 - 10:15 p.m.

CVE-2023-34575

2023-09-2022:15:12

CWE-89

mitre

web.nvd.nist.gov

cve-2023-34575

sql injection

vulnerability

prestashop

opartsavecart

nvd

security

remote attackers

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail() methods.

Affected configurations

Nvd

Node

op\'art_save_cart_projectop\'art_save_cartRange≤2.0.7prestashop

VendorProductVersionCPE
op\'art_save_cart_projectop\'art_save_cart*cpe:2.3:a:op\'art_save_cart_project:op\'art_save_cart:*:*:*:*:*:prestashop:*:*

Vendor	Product	Version	CPE
op\'art_save_cart_project	op\'art_save_cart	*	cpe:2.3:a:op\'art_save_cart_project:op\'art_save_cart::::::prestashop::*

References

security.friendsofpresta.org/modules/2023/09/19/opartsavecart.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

Related for CVE-2023-34575