CVE-2023-33280
In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a b…
Published: 2023-05-25 · CVSS: 9.8 · CVSS 3.1
In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7