Sql injection

2023-04-2600:15:00

PRIOn knowledge base

www.prio-n.com

prestashop

sql injection

remote attacker

privileges

nvd

vulnerability

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

JSON

SQL injection vulnerability found in PrestaShop askforaquote v.5.4.2 and before allow a remote attacker to gain privileges via the QuotesProduct::deleteProduct component.

CPENameOperatorVersion
ask_for_a_quotele5.4.2

CPE	Name	Operator	Version
	ask_for_a_quote	le	5.4.2

References

addons.prestashop.com/en/quotes/3725-ask-for-a-quote-convert-to-order-messaging-system.html

friends-of-presta.github.io/security-advisories/modules/2023/04/25/askforaquote.html