Sql injection

2024-01-2319:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

remote attacker

execute

arbitrary code

updateproductquantity

nvd

9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

JSON

SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id_product parameters in the UpdateProductQuantity function.

CPENameOperatorVersion
bundle_producteq6.0.1

CPE	Name	Operator	Version
	bundle_product	eq	6.0.1

References

medium.com/%40nasir.synack/uncovering-critical-vulnerability-cve-2023-51210-in-prestashop-plugin-bundle-product-pack-ad7fb08bdc91