5 matches found
CVE-2023-39648
Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” tvcmstestimonial up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...
Sql injection
Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” tvcmstestimonial up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...
CVE-2023-39648
CVE-2023-39648 describes an SQL injection in the PrestaShop Theme Volty CMS Testimonial module (tvcmstestimonial) up to version 4.0.1. The vulnerability arises from improper neutralization of SQL parameters, allowing a guest to inject SQL statements. Documented impact is high on confidentiality, ...
CVE-2023-39648: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” tvcmstestimonial up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...
CVE-2023-39648
Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” tvcmstestimonial up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...