| |
Podatność CVE-2023-46353
Publikacja: 2023-12-06 Modyfikacja: 2023-12-14
| Opis: |
In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon() has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection. |
Typ:
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
Referencje: |
https://security.friendsofpresta.org/modules/2023/11/28/ticons.html
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
Polish
English