Lucene search

K

[email protected]NVD:CVE-2024-33273

HistoryApr 30, 2024 - 3:15 p.m.

CVE-2024-33273

2024-04-3015:15:53

[email protected]

web.nvd.nist.gov

sql injection

shipup

privilege escalation

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

SQL injection vulnerability in shipup before v.3.3.0 allows a remote attacker to escalate privileges via the getShopID function.

References

security.friendsofpresta.org/modules/2024/04/29/shipup.html

www.shipup.co/fr

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-33273