Lucene search
HistoryJun 19, 2024 - 9:15 p.m.
CVE-2024-36678
sql injection
theme settings
promokit.eu
prestashop
ajax.php
cve-2024-36678
0.0004 Low
EPSS
Percentile
9.1%
In the module “Theme settings” (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The script ajax.php have a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.
Related
vulnrichment
vulnrichment
CVE-2024-36678
2024-06-19 00:00:00
cvelist
cvelist
CVE-2024-36678
2024-06-19 00:00:00
cve
cve
CVE-2024-36678
2024-06-19 21:15:57