5 matches found
CVE-2023-33278
In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection...
9.8CVSS7.3AI score0.0062EPSS
SaveExploits0References2
CVE-2023-33278
In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection...
9.8CVSS9.8AI score0.0062EPSS
SaveExploits0References2
CVE-2023-33278
CVE-2023-33278 affects the PrestaShop Store Commander scexportcustomers module up to version 3.6.1. The root cause is that sensitive SQL calls can be triggered by a trivial HTTP request, enabling a blind SQL injection. Impact is high on confidentiality, integrity and availability as described in ...
9.8CVSS9.7AI score0.0062EPSS
SaveExploits0References2Affected Software1
20