Lucene search
+L

3 matches found

NVD
NVD
•added 2024/03/14 3:15 a.m.•14 views

CVE-2024-28388

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method...

9.8CVSS7.3AI score0.00832EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/14 12:00 a.m.•72 views

CVE-2024-28388

A SQL injection vulnerability exists in the SunnyToo stproductcomments module for PrestaShop version 1.0.5 and earlier . The flaw originates in the StProductCommentClass::getListcomments method, which allows a remote attacker to escalate privileges and access sensitive information . To mitigate t...

9.8CVSS7.6AI score0.00832EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/03/14 12:00 a.m.•26 views

CVE-2024-28388

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method...

7.6AI score0.00832EPSS
SaveExploits1References1
Rows per page
Query Builder