In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-05-25T00:00:00

Updated: 2024-08-02T15:39:36.253Z

Reserved: 2023-05-22T00:00:00

Link: CVE-2023-33278

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-05-25T20:15:09.500

Modified: 2024-11-21T08:05:18.980

Link: CVE-2023-33278

cve-icon Redhat

No data.