NetSight
critical9.8

CVE-2023-33279

In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTTP request and exploite…

Impact

In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.

Affected products

VendorProductAffected versions
Scfixmyprestashop ProjectScfixmyprestashop
All versions

Weakness classification

References