PrestaShop Theme Volty CMS Blog - SQL Injection

In the module 'Theme Volty CMS Blog' tvcmsblog up to versions 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2023-39650 info: name: PrestaShop Theme Volty CMS Blog - SQL Injection author: mastercho severity: critical description: | In the...

CVE-2023-39650

creationtimestamp| type| source ---|---|--- 2023-08-29 02:20:11+00:00| seen| https://t.me/cibsecurity/69333 2024-01-03 21:07:56+00:00| seen| https://t.me/arpsyndicate/2361...

CVE-2023-39650

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...

CVE-2023-39650

The CVE-2023-39650 entry corresponds to a SQL injection in the PrestaShop Theme Volty CMS Blog module (tvcmsblog) up to version 4.0.1, exploitable via the id parameter at /tvcmsblog/single. The nuclei template confirms the vulnerability in tvcmsblog up to 4.0.1 and describes impact as arbitrary S...