PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop askforaquote version v.5.4.2 and earlier versions. A remote...

PT-2023-21368 · Prestashop · Prestashop Askforaquote

Name of the Vulnerable Software and Affected Versions: PrestaShop askforaquote versions 5.4.2 and earlier Description: A SQL injection issue allows a remote attacker to gain privileges via the QuotesProduct::deleteProduct component. This enables the attacker to potentially access and manipulate...