8 matches found
CVE-2024-24303
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" hiadvancedgiftwrapping module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue...
CVE-2024-24303
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" hiadvancedgiftwrapping module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue...
Sql injection
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" hiadvancedgiftwrapping module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue...
CVE-2024-24303
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" hiadvancedgiftwrapping module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue...
PT-2024-20346 · Prestashop · Hipresta Gift Wrapping Pro
Name of the Vulnerable Software and Affected Versions: HiPresta Gift Wrapping Pro module for PrestaShop versions prior to 1.4.1 Description: The issue allows remote attackers to escalate privileges and obtain sensitive information via the...
CVE-2024-24303
CVE-2024-24303 describes a SQL Injection in the HiPresta Gift Wrapping Pro module (hiadvancedgiftwrapping) for PrestaShop up to versions before 1.4.1. The vulnerability stems from the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue() method, enabling remote attac...
CVE-2024-24303: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" hiadvancedgiftwrapping module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue...
CVE-2024-24303
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" hiadvancedgiftwrapping module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue...