Lucene search
+L

5 matches found

NVD
NVD
•added 2024/04/29 8:15 p.m.•21 views

CVE-2024-33269

SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method...

9.8CVSS7.8AI score0.00503EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/29 12:00 a.m.•62 views

CVE-2024-33269

A SQL Injection vulnerability exists in Prestaddons flashsales versions 1.9.7 and before . The flaw is located in the FsModel::getFlashSales method, which allows an attacker to execute arbitrary SQL commands . This could lead to unauthorized data access or modification. As a temporary workaround,...

9.8CVSS8.2AI score0.00503EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/29 12:00 a.m.•16 views

CVE-2024-33269

SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method...

8.2AI score0.00503EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/29 12:00 a.m.•29 views

CVE-2024-33269

SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method...

8.2AI score0.00503EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•4 views

CVE-2024-33269: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References2
Rows per page
Query Builder