Sql injection

In the module "Jms Setting" jmssetting from Joommasters for PrestaShop, a guest can perform SQL injection in versions = 1.1.0. The method JmsSetting::getSecondImgs has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop due to an SQL injection vulnerability in the JmsSetting::getSecondImgs...

PT-2024-13852 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: Jms Setting module for PrestaShop versions = 1.1.0 Description: The issue allows a guest to perform SQL injection. The method JmsSetting::getSecondImgs contains a sensitive SQL call that can be exploited to forge a blind SQL injection with a...