Sql injection

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...

PT-2024-20349 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: Prestashop versions 1.1.9 and before Description: The issue allows remote attackers to escalate privileges and obtain sensitive information. This is achieved via several PHP files, including "changeOrderCarrier.php", "relayPoint.php", and...

CVE-2024-24308

SQL Injection vulnerability in Boostmyshop boostmyshopagent module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php...