In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-05-25T00:00:00

Updated: 2024-08-02T15:39:36.245Z

Reserved: 2023-05-22T00:00:00

Link: CVE-2023-33280

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-05-25T20:15:09.633

Modified: 2024-11-21T08:05:19.307

Link: CVE-2023-33280

cve-icon Redhat

No data.