CVE-2023-33278

CVE-2023-33278 affects the PrestaShop Store Commander scexportcustomers module up to version 3.6.1. The root cause is that sensitive SQL calls can be triggered by a trivial HTTP request, enabling a blind SQL injection. Impact is high on confidentiality, integrity and availability as described in ...