Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-33272 EUVD-2024-31017GHSA-qf3v-5j25-cjgv

SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the Au…

Published Apr 29, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the AutosuggestSearchModuleFrontController::initContent(), and AutosuggestSearchModuleFrontController::getKbProducts() components.

References