Description
In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.
Critical · 9.8
CVE-2023-33279
EUVD-2023-37444GHSA-2546-6m8x-7vmx
In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTTP …
Published May 25, 2023 · Updated Jan 16, 2025 · Assigned by mitre