critical9.8
CVE-2023-38044
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.
Impact
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hikashop | Hikashop | from 4.0.0 through 4.7.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://extensions.joomla.org/vulnerable-extensions/resolved/hikashop-versions-from-4-4-1-to-4-7-2-are-affected-sql-injection/
- https://www.hikashop.com/support/documentation/56-hikashop-changelog.html
- https://extensions.joomla.org/vulnerable-extensions/resolved/hikashop-versions-from-4-4-1-to-4-7-2-are-affected-sql-injection/
- https://www.hikashop.com/support/documentation/56-hikashop-changelog.html