1 results (0.009 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

24 Jun 2024 — SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods `AskforaquotemodulcustomernewquoteModuleFrontController::run()`, `AskforaquotemoduladdproductnewquoteModuleFrontController::run()`, `AskforaquotemodulCouponcodeModuleFrontController::run()`, `AskforaquotemodulgetshippingcostModuleFrontController::run()`, `Askforaquotemo... • https://security.friendsofpresta.org/modules/2024/06/20/askforaquotemodul.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •