high8.8
CVE-2024-24310
In the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether Creation <= 1.2.0 for PrestaShop, a guest can perform SQL injection.
Impact
In the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether Creation <= 1.2.0 for PrestaShop, a guest can perform SQL injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ethercreation | Generate Barcode On Invoice \/ Delivery Slip | through 1.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://addons.prestashop.com/en/preparation-shipping/24123-generate-barcode-on-invoice-delivery-slip.html
- https://security.friendsofpresta.org/modules/2024/02/20/ecgeneratebarcode.html
- https://addons.prestashop.com/en/preparation-shipping/24123-generate-barcode-on-invoice-delivery-slip.html
- https://security.friendsofpresta.org/modules/2024/02/20/ecgeneratebarcode.html