Lucene search
HistoryJun 24, 2024 - 11:15 p.m.
CVE-2024-36681
sql injection
isotope module
prestashop
vulnerability
sensitive information
promokit.eu
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.1%
SQL Injection vulnerability in the module “Isotope” (pk_isotope) <=1.7.3 from Promokit.eu for PrestaShop allows attackers to obtain sensitive information and cause other impacts via pk_isotope::saveData and pk_isotope::removeData methods.
Related
vulnrichment
vulnrichment
CVE-2024-36681
2024-06-24 00:00:00
cve
cve
CVE-2024-36681
2024-06-24 23:15:10
cvelist
cvelist
CVE-2024-36681
2024-06-24 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.1%
Related for NVD:CVE-2024-36681