| |
Vulnerability CVE-2023-46353
Published: 2023-12-06 Modified: 2023-12-14
| Description: |
In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon() has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection. |
Type:
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
References: |
https://security.friendsofpresta.org/modules/2023/11/28/ticons.html
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
