NetSight
medium6.8

CVE-2024-33272

SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the AutosuggestSearchModul…

Impact

SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the AutosuggestSearchModuleFrontController::initContent(), and AutosuggestSearchModuleFrontController::getKbProducts() components.

Affected products

ProductAffected versions
KnowBand For PrestaShop Autosuggest
before 2.0.0

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References