CVE-2023-27844

2023-04-1700:00:00

mitre

www.cve.org

prestashop

sql injection

vulnerability

remote attacker

privileges

dispatcher::getcontroller component

EPSS

0.002

Percentile

51.3%

JSON

SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController component.

References

friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html

litextension.com/migration-services/seo-urls-migrations.html#page%232

EPSS

0.002

Percentile

51.3%

JSON

Related for CVELIST:CVE-2023-27844