Unscored CVE-2023-43986 EUVD-2023-48345GHSA-j6cr-wmfq-h73p

DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::get…

Published Oct 19, 2023 · Updated Sep 12, 2024 · Assigned by mitre

Description

DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken.

References

https://addons.prestashop.com/fr/declinaisons-personnalisation/20343-configurateur-avance-de-produit-sur-mesure-par-etape.html
https://security.friendsofpresta.org/modules/2023/10/19/configurator.html