Lucene search
PRIOn knowledge basePRION:CVE-2023-45378HistoryOct 31, 2023 - 4:15 a.m.
Sql injection
2023-10-3104:15:00
PRIOn knowledge base
www.prio-n.com
6
prestablog
sql injection
ajax
slider_positions.php
hdclic
prestashop
In the module “PrestaBlog” (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL injection. The script ajax slider_positions.php has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| prestablog | lt | 4.4.8 |
Related
cvelist
cvelist
CVE-2023-45378
2023-10-31 00:00:00
nvd
nvd
CVE-2023-45378
2023-10-31 04:15:11
cve
cve
CVE-2023-45378
2023-10-31 04:15:11