PT-2024-13852 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: Jms Setting module for PrestaShop versions = 1.1.0 Description: The issue allows a guest to perform SQL injection. The method JmsSetting::getSecondImgs contains a sensitive SQL call that can be exploited to forge a blind SQL injection with a...

CVE-2023-50030: Improper Neutralization of Special Elements used in an SQL Command

In the module "Jms Setting" jmssetting from Joommasters for PrestaShop, a guest can perform SQL injection in versions = 1.1.0. The method JmsSetting::getSecondImgs has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection...