| |
Vulnerability CVE-2024-33276
Published: 2024-04-29
| Description: |
SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the PreorderModel::getIdProductAttributesByIdAttributes() method. |
References: |
https://security.friendsofpresta.org/modules/2024/04/25/preorderandnotification.html
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
