NetSight
critical9.8

CVE-2024-34989

In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFProductListModuleFro…

Impact

In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFProductListModuleFrontController::queryDb().'

Affected products

ProductAffected versions
Module RSI PDF/HTML Catalog Evolution (Prestapdf)
through 7.0.0

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References