CVE-2024-33275: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

CVE-2024-33275

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

CVE-2024-33275

A SQL injection vulnerability (CWE-89) exists in the Webbax supernewsletter module (versions v.1.4.21 and before ) for the PrestaShop e-commerce solution. The flaw originates within the product_search.php component, which allows a remote attacker to escalate privileges . To remediate this, users ...