Security Advisory

CVE-2023-30154

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-10-14 00:00:00

Last updated 2024-09-17 19:49:41

Assigner mitre

State PUBLISHED

Description

Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version 2.2.1, allows remote attackers to perform SQL injection attacks via `id_customer`, `id_conf`, `id_product` and `token` parameters in `aftermailajax.php via the id_product parameter in hooks DisplayRightColumnProduct and DisplayProductButtons.

← Browse all CVEs View on cve.org ↗