CVE-2023-26860: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component...

CVE-2023-26858

SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component...

CVE-2023-26858: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component...

PT-2023-20828 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaSHp faqs version 3.1.6 Description: A SQL injection issue allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component. This enables the attacker to potentially gain...