critical9.8
CVE-2023-27844
SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController compo…
Impact
SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Litextension | Leurlrewrite | through 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html
- https://litextension.com/migration-services/seo-urls-migrations.html#page%232
- https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html
- https://litextension.com/migration-services/seo-urls-migrations.html#page%232