Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/07 12:00 a.m.•2 views

CVE-2024-24303: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" hiadvancedgiftwrapping module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue...

9.8CVSS5.9AI score0.00676EPSS
SaveExploits0References3
Rows per page
Query Builder