CVE-2024-28388: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method...

PT-2024-22407

Name of the Vulnerable Software and Affected Versions SunnyToo stproductcomments module for PrestaShop versions 1.0.5 and earlier Description The issue allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method. This is a...