Sql injection

2023-04-1013:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

prestashop

vulnerability

remote attacker

privileges

nvd

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.4%

JSON

SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component.

CPENameOperatorVersion
save_your_carts_and_buy_later_or_send_itle1.0.3

CPE	Name	Operator	Version
	save_your_carts_and_buy_later_or_send_it	le	1.0.3

References

addons.prestashop.com/en/order-management/45282-save-your-carts-and-buy-later-or-send-it.html

friends-of-presta.github.io/security-advisories/modules/2023/04/04/lgbudget.html