CVE-2024-28393

The e-commerce software Scalapay is affected by an SQL injection vulnerability in versions 1.2.41 and earlier . A remote attacker can exploit the ScalapayReturnModuleFrontController::postProcess() method to escalate privileges . As a temporary workaround, users are advised to disable the affected...

CVE-2024-28393

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess method...