Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/08 12:00 a.m.•4 views

CVE-2024-25849: Improper Neutralization of Special Elements used in an SQL Command

In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...

9.8CVSS5.8AI score0.00636EPSS
SaveExploits0References2
Rows per page
Query Builder