critical9.8
CVE-2024-33268
SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method.
Impact
SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method.
Affected products
| Product | Affected versions |
|---|---|
| Digincube Mdgiftproduct | before 1.4.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.