Description
SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupdateOrdersModuleFrontController::initContent function.
Critical · 9.8
CVE-2024-33266
EUVD-2024-31011GHSA-m57m-663q-6vcv
SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via th…
Published Apr 29, 2024 · Updated Sep 6, 2024 · Assigned by mitre