Description
SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method.
Critical · 9.8
CVE-2024-33268
EUVD-2024-31013GHSA-qrhr-874f-j4cj
SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::ad…
Published Apr 29, 2024 · Updated Aug 2, 2024 · Assigned by mitre