Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:03 a.m.•14 views

CVE-2023-46914

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via icsexport.php...

9.8CVSS8.6AI score0.00801EPSS
SaveExploits0
OSV
OSV
•added 2024/02/07 9:15 a.m.•13 views

CVE-2023-46914

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via icsexport.php...

9.8CVSS6.1AI score0.00801EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/07 9:15 a.m.•37 views

CVE-2023-46914

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via icsexport.php...

9.8CVSS10AI score0.00801EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/07 12:00 a.m.•16 views

CVE-2023-46914

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via icsexport.php...

8.5AI score0.00801EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/07 12:00 a.m.•62 views

CVE-2023-46914

The CVE-2023-46914 issue affects the PrestaShop RM bookingcalendar module (PrestaShop v2.7.9 and earlier). A SQL Injection in the ics_export.php endpoint is the root cause, enabling remote attackers to potentially execute arbitrary code, escalate privileges, and access sensitive information. Mult...

9.8CVSS9.8AI score0.00801EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/07 12:00 a.m.•42 views

CVE-2023-46914

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via icsexport.php...

10AI score0.00801EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/07 12:00 a.m.•5 views

CVE-2023-46914: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via icsexport.php...

9.8CVSS6.3AI score0.00801EPSS
SaveExploits0References3
Rows per page
Query Builder