3 matches found
Sql injection
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...
7.5CVSS8.6AI score0.00504EPSS
SaveExploits0References1Affected Software1
CVE-2023-40922
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...
10AI score0.00504EPSS
SaveExploits0References1
CVE-2023-40922: Improper Neutralization of Special Elements used in an SQL Command
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...
9.8CVSS8.2AI score0.00504EPSS
SaveExploits0References2
20