CVE-2024-34988

2024-06-2400:00:00

mitre

github.com

sql injection

complete for create a quote in frontend + backend pro

buy addons for prestashop

vulnerability

AI Score

7.4

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

SQL injection vulnerability in the module “Complete for Create a Quote in Frontend + Backend Pro” (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods AskforaquotemodulcustomernewquoteModuleFrontController::run(), AskforaquotemoduladdproductnewquoteModuleFrontController::run(), AskforaquotemodulCouponcodeModuleFrontController::run(), AskforaquotemodulgetshippingcostModuleFrontController::run(), AskforaquotemodulgetstateModuleFrontController::run().

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:prestashop:ask_for_a_quote:1.0.52:*:*:*:*:*:*:*"
    ],
    "vendor": "prestashop",
    "product": "ask_for_a_quote",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.52",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]