CVE Catalog
CVE-2023-33279
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.60%
44th percentile - higher than 44% of all known CVEs
Summary
The scfixmyprestashop module in Store Commander through 2023-05-09 for PrestaShop allows sensitive SQL calls to be executed with a trivial HTTP request, potentially leading to blind SQL injection.
Risk Assessment
The organization may be exposed to unauthorized data access and database manipulation, which could lead to serious legal and financial consequences.
Recommendation
It is recommended to update the scfixmyprestashop module to the latest version and review application security to minimize the risk of SQL injection.
Original NVD description (English source)
In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.