CVE-2024-33266

Impact

SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupdateOrdersModuleFrontController::initContent function.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://security.friendsofpresta.org/modules/2024/04/25/deliveryorderautoupdate.html
• https://security.friendsofpresta.org/modules/2024/04/25/deliveryorderautoupdate.html