Lucene search
PRIOn knowledge basePRION:CVE-2023-27637HistoryMar 22, 2023 - 1:15 p.m.
Sql injection
2023-03-2213:15:00
PRIOn knowledge base
www.prio-n.com
1
tshirtecommerce
prestashop
sql injection
http request
compromised product_id
front controller file
designer.php
nvd
march 2023
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised product_id GET parameter in order to exploit an insecure parameter in the front controller file designer.php, which could lead to a SQL injection. This is exploited in the wild in March 2023.
| CPE | Name | Operator | Version |
|---|---|---|---|
| custom_product_designer | eq | 2.1.4 |
Related
nvd
nvd
CVE-2023-27637
2023-03-22 13:15:10
cve
cve
CVE-2023-27637
2023-03-22 13:15:10
cvelist
cvelist
CVE-2023-27637
2023-03-22 00:00:00