Lucene search
PRIOn knowledge basePRION:CVE-2023-50030HistoryJan 19, 2024 - 2:15 p.m.
Sql injection
2024-01-1914:15:00
PRIOn knowledge base
www.prio-n.com
5
jmssetting
sql injection
prestashop
nvd
blind injection
In the module “Jms Setting” (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0. The method JmsSetting::getSecondImgs() has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jmssetting | le | 1.1.0 |
Related
cve
cve
CVE-2023-50030
2024-01-19 14:15:12
cvelist
cvelist
CVE-2023-50030
2024-01-19 00:00:00
nvd
nvd
CVE-2023-50030
2024-01-19 14:15:12