critical9.8
CVE-2023-48925
SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the com…
Impact
SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run().
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Buy-Addons | Bavideotab | before 1.0.6 |