SQL Injection Vulnerability in Ether Creation Module for PrestaShop
CVE-2024-24310

Currently unrated

Key Information:

Vendor

Ether Creation

Status
Generate barcode on invoice / delivery slip
Vendor
CVE Published:
23 February 2024

What is CVE-2024-24310?

The 'Generate barcode on invoice / delivery slip' module by Ether Creation for PrestaShop versions up to 1.2.0 is susceptible to SQL injection attacks. This vulnerability allows an unauthenticated guest to execute arbitrary SQL queries, potentially leading to unauthorized data access and manipulation. Website owners using this module should implement necessary security measures and consider updating to secure versions to mitigate exposure.

References

https://addons.prestashop.com/en/preparation-shipping/241...
https://security.friendsofpresta.org/modules/2024/02/20/e...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.