cbcvebase.

Ndkdesign Ndk Steppingpack vulnerabilities

1 known vulnerability affecting ndkdesign/ndk_steppingpack.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-46347P1CRITICALCVSS 9.8ExploitedPoCfixed in 1.5.72023-10-25
CVE-2023-46347 [CRITICAL] CWE-89 CVE-2023-46347: In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Desi In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a guest can perform SQL injection. The method `NdkSpack::getPacks()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
nvd
Ndkdesign Ndk Steppingpack vulnerabilities | cvebase