CVE-2023-33280

In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection...

CVE-2023-33280

In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection...

PT-2023-24265 · Prestashop +1 · Store Commander Scquickaccounting Module +1

Name of the Vulnerable Software and Affected Versions: Store Commander scquickaccounting module for PrestaShop versions through 3.7.3 Description: The issue allows multiple sensitive SQL calls to be executed with a trivial HTTP request, which can be exploited to forge a blind SQL injection...

CVE-2023-33280

CVE-2023-33280 affects the Store Commander scquickaccounting module for PrestaShop up to version 3.7.3. The vulnerability allows multiple sensitive SQL calls to be performed via a trivial HTTP request, enabling a blind SQL injection. The CVSS vector provided indicates Network access, low attack c...

CVE-2023-30281

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...

CVE-2023-30281

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...

PrestaShop scquickaccounting 安全漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop scquickaccounting versions prior to v3.7.3 that stems from...