CVE-2023-34576

CriticalCVSS 9.8

Published: 21/09/2023(UTC)Updated: 12/06/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

44th percentile - higher than 44% of all known CVEs

Summary

In PrestaShop opartfaq version 1.0.3 and below, there is an SQL injection vulnerability in updatepos.php that allows remote attackers to execute arbitrary SQL commands.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or system compromise.

Recommendation

It is recommended to update to the latest version of PrestaShop opartfaq to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector.