Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:38 a.m.5 views

CVE-2024-24308

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

9.8CVSS8.1AI score0.00293EPSS
Exploits0References1
NVD
NVD
added 2024/02/09 8:15 a.m.14 views

CVE-2024-24308

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

9.8CVSS9.8AI score0.00293EPSS
Exploits0References1
OSV
OSV
added 2024/02/09 8:15 a.m.0 views

CVE-2024-24308

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

9.8CVSS5.9AI score
Exploits0References1
Prion
Prion
added 2024/02/09 8:15 a.m.11 views

Sql injection

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

7.5CVSS8.6AI score0.00293EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/02/09 12:0 a.m.49 views

CVE-2024-24308

CVE-2024-24308 describes an SQL Injection in the Boostmyshopagent module for Prestashop, affecting versions 1.1.9 and earlier. The vulnerability allows a remote attacker to escalate privileges and exfiltrate sensitive data through vulnerable PHP files: changeOrderCarrier.php, relayPoint.php, and ...

9.8CVSS9.7AI score0.00293EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/09 12:0 a.m.15 views

CVE-2024-24308

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

8AI score0.00293EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/09 12:0 a.m.14 views

CVE-2024-24308

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

10AI score0.00293EPSS
Exploits0References1
Rows per page
Query Builder