Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/31 12:00 a.m.•1 views

CVE-2023-36263: Improper Neutralization of Special Elements used in an SQL Command

Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection. OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAlertMessage has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

9.8CVSS8.2AI score0.00487EPSS
SaveExploits0References4
Rows per page
Query Builder