CyberSec.Space Logo
CVEブラウザに戻る

CVE-2023-34575

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1540%
EPSS Percentile33.41th
Published2023年9月20日
Last Modified2026年6月12日

Vulnerability Description

SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail() methods.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://security.friendsofpresta.org/modules/2023/09/19/opartsavecart.html
🔗 https://security.friendsofpresta.org/modules/2023/09/19/opartsavecart.html

関連する脆弱性情報

CVE-2023-27139.8

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-comme...

CVE-2023-343629.8

MOVEit Transfer SQL Injection vulnerability allows unauthenticated attackers to gain unauthorized access to MOVEit Transfer's data...

CVE-2023-20649.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Minova Technology eTrace all...

CVE-2023-350649.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQ...