CVE-2024-36683
published 2024-06-24CVE-2024-36683: SQL injection vulnerability in the module "Products Alert" (productsalert) before 1.7.4 from Smart Modules for PrestaShop allows attackers to obtain sensitive…
PriorityP351high7.3CVSS 3.1
AVNACLPRNUINSUCLILAL
EXPLOIT
EPSS
0.96%
57.2th percentile
SQL injection vulnerability in the module "Products Alert" (productsalert) before 1.7.4 from Smart Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via the ProductsAlertAjaxProcessModuleFrontController::initContent method.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
PrestaShop productsalert - SQL Injection
nuclei·CVSS 7.3
CVE-2024-36683 [HIGH] PrestaShop productsalert - SQL Injection
PrestaShop productsalert - SQL Injection
In the module 'Products Alert' (productsalert) up to version 1.7.4 from Smart Modules for PrestaShop, a guest can perform SQL injection in affected versions.
Template:
id: CVE-2024-36683
info:
name: PrestaShop productsalert - SQL Injection
author: mastercho
severity: critical
description: |
In the module 'Products Alert' (productsalert) up to version 1.7.4 from Smart Modules for PrestaShop, a guest can perform SQL injection in affected versions.
remediation: |
Apply the latest security patches and updates from the vendor to address this vulnerability.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized accessand data leakage.
reference:
- https://se
No writeups or analysis indexed.
2024-06-24
Published