Lucene search
+L

7 matches found

NVD
NVD
•added 2024/03/14 3:15 a.m.•12 views

CVE-2024-28388

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method...

9.8CVSS7.3AI score0.00832EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/14 3:15 a.m.•15 views

CVE-2024-28388

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method...

9.8CVSS5.9AI score0.00832EPSS
SaveExploits1References1
Prion
Prion
•added 2024/03/14 3:15 a.m.•22 views

Sql injection

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method...

8AI score0.00832EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/14 12:00 a.m.•4 views

CVE-2024-28388: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method...

9.8CVSS6AI score0.00832EPSS
SaveExploits1References2
CVE
CVE
•added 2024/03/14 12:00 a.m.•72 views

CVE-2024-28388

A SQL injection vulnerability exists in the SunnyToo stproductcomments module for PrestaShop version 1.0.5 and earlier . The flaw originates in the StProductCommentClass::getListcomments method, which allows a remote attacker to escalate privileges and access sensitive information . To mitigate t...

9.8CVSS7.6AI score0.00832EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•13 views

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts, and product image scaling. A SQL injection vulnerability exists in PrestaShop stproductcomments v.1.0.5 and earlier versions, which...

9.8CVSS7.8AI score0.00832EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/03/14 12:00 a.m.•15 views

PT-2024-22407

Name of the Vulnerable Software and Affected Versions SunnyToo stproductcomments module for PrestaShop versions 1.0.5 and earlier Description The issue allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method. This is a...

9.8CVSS8.1AI score0.00832EPSS
SaveExploits1References6
Rows per page
Query Builder