Sql injection

In the module "Import/Update Bulk Product from any Csv/Excel File Pro" baimporter up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2024-25843

The Import/Update Bulk Product from any Csv/Excel File Pro (ba_importer) module for PrestaShop , developed by Buy Addons, is vulnerable to SQL injection in versions up to 1.1.28 . This flaw allows an unauthenticated guest to perform SQL injection attacks. To remediate this issue, users should upd...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop baimporter versions prior to 1.1.28, which stems from a SQL...

CVE-2024-25843: Improper Neutralization of Special Elements used in an SQL Command

In the module "Import/Update Bulk Product from any Csv/Excel File Pro" baimporter up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions...