PT-2020-7608

Name of the Vulnerable Software and Affected Versions Advanced Newsletter Magento extension versions prior to 2.3.5 Description The issue exists due to SQL Injection in the Advanced Newsletter Magento extension. This can be exploited via the "/store/advancednewsletter/index/subscribeajax/an...

CVE-2014-1634: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/ancategoryid/ PATHINFO...