Security Advisory

CVE-2024-34988

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-06-24 00:00:00

Last updated 2024-08-02 03:07:45

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods `AskforaquotemodulcustomernewquoteModuleFrontController::run()`, `AskforaquotemoduladdproductnewquoteModuleFrontController::run()`, `AskforaquotemodulCouponcodeModuleFrontController::run()`, `AskforaquotemodulgetshippingcostModuleFrontController::run()`, `AskforaquotemodulgetstateModuleFrontController::run().`

← Browse all CVEs View on cve.org ↗