CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/23 9:38 a.m.•14 views

CVE-2024-24308

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

9.8CVSS8.1AI score0.00676EPSS

Exploits0References1

NVD•added 2024/02/09 8:15 a.m.•26 views

CVE-2024-24308

9.8CVSS9.8AI score0.00676EPSS

Exploits0References1

CVE•added 2024/02/09 12:0 a.m.•62 views

CVE-2024-24308

CVE-2024-24308 describes an SQL Injection in the Boostmyshopagent module for Prestashop, affecting versions 1.1.9 and earlier. The vulnerability allows a remote attacker to escalate privileges and exfiltrate sensitive data through vulnerable PHP files: changeOrderCarrier.php, relayPoint.php, and ...

9.8CVSS9.7AI score0.00676EPSS

Exploits0References1Affected Software1