CVE-2023-39648

CVE-2023-39648 describes an SQL injection in the PrestaShop Theme Volty CMS Testimonial module (tvcmstestimonial) up to version 4.0.1. The vulnerability arises from improper neutralization of SQL parameters, allowing a guest to inject SQL statements. Documented impact is high on confidentiality, ...

CVE-2023-39646

Theme Volty CMS Category Chain Slider (PrestaShop) vulnerable in tvcmscategorychainslider up to version 4.0.1 due to improper neutralization of SQL parameters, enabling SQL injection by a guest. Affected component is the PrestaShop module from Theme Volty with the vulnerable code path in the Cate...

CVE-2023-39650

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...

Sql injection

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...

CVE-2023-39650: Improper Neutralization of Special Elements used in an SQL Command

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...

PT-2023-27054

Name of the Vulnerable Software and Affected Versions Theme Volty CMS Blog versions up to v4.0.1 Description The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/tvcmsblog/single" API endpoint. This vulnerability allows attackers to inject malicious SQL...

CVE-2023-39650

The CVE-2023-39650 entry corresponds to a SQL injection in the PrestaShop Theme Volty CMS Blog module (tvcmsblog) up to version 4.0.1, exploitable via the id parameter at /tvcmsblog/single. The nuclei template confirms the vulnerability in tvcmsblog up to 4.0.1 and describes impact as arbitrary S...