Lucene search
+L

5 matches found

OSV
OSV
•added 2024/01/19 2:15 p.m.•21 views

CVE-2023-50030

In the module "Jms Setting" jmssetting from Joommasters for PrestaShop, a guest can perform SQL injection in versions = 1.1.0. The method JmsSetting::getSecondImgs has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection...

9.8CVSS5.8AI score0.00666EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/01/19 12:00 a.m.•19 views

CVE-2023-50030

In the module "Jms Setting" jmssetting from Joommasters for PrestaShop, a guest can perform SQL injection in versions = 1.1.0. The method JmsSetting::getSecondImgs has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection...

8AI score0.00666EPSS
SaveExploits1References2
CVE
CVE
•added 2024/01/19 12:00 a.m.•65 views

CVE-2023-50030

The CVE-2023-50030 issue affects the Jms Setting module for PrestaShop (Joommasters). The vulnerability is a blind SQL injection in JmsSetting::getSecondImgs() that can be triggered by a trivial HTTP request, affecting versions

9.8CVSS9.8AI score0.00666EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2024/01/19 12:00 a.m.•41 views

CVE-2023-50030

In the module "Jms Setting" jmssetting from Joommasters for PrestaShop, a guest can perform SQL injection in versions = 1.1.0. The method JmsSetting::getSecondImgs has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection...

10AI score0.00666EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/19 12:00 a.m.•6 views

CVE-2023-50030: Improper Neutralization of Special Elements used in an SQL Command

In the module "Jms Setting" jmssetting from Joommasters for PrestaShop, a guest can perform SQL injection in versions = 1.1.0. The method JmsSetting::getSecondImgs has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection...

9.8CVSS8AI score0.00666EPSS
SaveExploits1References3
Rows per page
Query Builder