Lucene search

K
cvelistMitreCVELIST:CVE-2023-30154
HistoryOct 14, 2023 - 12:00 a.m.

CVE-2023-30154

2023-10-1400:00:00
mitre
www.cve.org
4
sql injection
aftermail module
prestashop

AI Score

10

Confidence

High

EPSS

0.001

Percentile

30.8%

Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version 2.2.1, allows remote attackers to perform SQL injection attacks via id_customer, id_conf, id_product and token parameters in `aftermailajax.php via the β€˜id_product’ parameter in hooks DisplayRightColumnProduct and DisplayProductButtons.

AI Score

10

Confidence

High

EPSS

0.001

Percentile

30.8%

Related for CVELIST:CVE-2023-30154