CVE-2023-38044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-38044 Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-38044 Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-38044

CVE-2023-38044 describes an SQL Injection in the HikaShop Joomla extension. Affected product: HikaShop Joomla Component versions 4.4.1 through 4.7.2. Root cause: improper neutralization of special elements in SQL commands. Impact: high confidentiality, integrity, and availability risks (NVD CVSS ...