Lucene search
PRIOn knowledge basePRION:CVE-2023-46353HistoryDec 06, 2023 - 11:15 p.m.
Sql injection
2023-12-0623:15:00
PRIOn knowledge base
www.prio-n.com
6
product tag icons pro
sql injection
prestashop
sensitive sql calls
http call
nvd
In the module “Product Tag Icons Pro” (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon() has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| product_tag_icons_pro | lt | 1.8.4 |
Related
cvelist
cvelist
CVE-2023-46353
2023-12-06 00:00:00
cve
cve
CVE-2023-46353
2023-12-06 23:15:07
cnvd
cnvd
PrestaShop SQL Injection Vulnerability (CNVD-2023-9749945)
2023-12-08 00:00:00
nvd
nvd
CVE-2023-46353
2023-12-06 23:15:07