Lucene search
PRIOn knowledge basePRION:CVE-2023-30149HistoryJun 02, 2023 - 3:15 p.m.
Sql injection
2023-06-0215:15:00
PRIOn knowledge base
www.prio-n.com
1
vulnerability
sql injection
city autocomplete
ebewe.net
prestashop
remote attackers
arbitrary sql commands
autocompletion.php
nvd
0.001 Low
EPSS
Percentile
46.6%
SQL injection vulnerability in the City Autocomplete (cityautocomplete) module from ebewe.net for PrestaShop, prior to version 1.8.12 (for PrestaShop version 1.5/1.6) or prior to 2.0.3 (for PrestaShop version 1.7), allows remote attackers to execute arbitrary SQL commands via the type, input_name. or q parameter in the autocompletion.php front controller.
| CPE | Name | Operator | Version |
|---|---|---|---|
| city_autocomplete | lt | 1.8.12 | |
| city_autocomplete | lt | 2.0.3 |
Related
cve
cve
CVE-2023-30149
2023-06-02 15:15:09
cvelist
cvelist
CVE-2023-30149
2023-06-02 00:00:00
nvd
nvd
CVE-2023-30149
2023-06-02 15:15:09