CVE-2023-30154

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 14/10/2023 Updated: 18/10/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version 2.2.1, allows remote malicious users to perform SQL injection attacks via `id_customer`, `id_conf`, `id_product` and `token` parameters in `aftermailajax.php via the 'id_product' parameter in hooks DisplayRightColumnProduct and DisplayProductButtons.

Vulnerable Product	Search on Vulmon	Subscribe to Product
shoprunners aftermail

CWE-89 https://security.friendsofpresta.org/modules/2023/10/10/aftermailpresta.html https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-30154

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect