CVE-2024-34992

SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets'...

CVE-2024-34992

The FME Modules for PrestaShop "Help Desk - Customer Support Management System" (helpdesk) module is vulnerable to SQL Injection in versions up to 2.4.0 . The root cause is located in the Tickets::getsearchedtickets() function, which allows attackers to obtain sensitive information and cause othe...