9 matches found
EUVD-2024-23156
Malicious code in bioql PyPI...
CVE-2024-25849
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
CVE-2024-25849
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
CVE-2024-25849
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
Sql injection
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
CVE-2024-25849
The PrestaToolKit "Make an offer" (makeanoffer ) module for PrestaShop is vulnerable to SQL injection in versions 1.7.1 and earlier . A guest user can exploit this vulnerability via the MakeOffers::checkUserExistingOffer() and MakeOffers::addUserOffer() functions. The impact is severe, potentiall...
CVE-2024-25849: Improper Neutralization of Special Elements used in an SQL Command
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
CVE-2024-25849
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
PT-2024-21161 · Prestatoolkit · Prestatoolkit Make An Offer Module
Name of the Vulnerable Software and Affected Versions: PrestaToolKit Make an offer module version 1.7.1 and earlier Description: A SQL injection issue exists in the Make an offer module, allowing a guest to perform SQL injection via the MakeOffers::checkUserExistingOffer and...