5 matches found
CVE-2023-50026
SQL injection vulnerability in Presta Monster "Multi Accessories Pro" hsmultiaccessoriespro module for PrestaShop versions 5.1.1 and before, allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts...
CVE-2023-50026: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Presta Monster "Multi Accessories Pro" hsmultiaccessoriespro module for PrestaShop versions 5.1.1 and before, allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts...
CVE-2023-50026
SQL injection vulnerability in Presta Monster "Multi Accessories Pro" hsmultiaccessoriespro module for PrestaShop versions 5.1.1 and before, allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts...
PT-2024-13849
Name of the Vulnerable Software and Affected Versions PrestaShop versions 5.1.1 and earlier Description The issue allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts. This is a SQL injection...
CVE-2023-50026
CVE-2023-50026 is a SQL injection vulnerability affecting the PrestaMonster/PrestaShop integration in the hsmultiaccessoriespro module. The issue is triggered through HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts() and impacts PrestaShop versions 5.1.1 and earlier. According to th...