PT-2024-25177 · Unknown · Helloshop Deliveryorderautoupdate

Name of the Vulnerable Software and Affected Versions: Helloshop deliveryorderautoupdate versions 2.8.1 and earlier Description: The issue allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupdateOrdersModuleFrontController::initContent function. This enables the execution ...