CVE-2024-33275

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

CVE-2024-33275

The CVE describes a SQL injection affecting Webbax supernewsletter v1.4.21 and earlier, via the product_search.php component of the Super Newsletter module. The root cause is an SQL injection that enables a remote attacker to escalate privileges, with impact described as high confidentiality, int...