Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-27846
HistoryOct 31, 2023 - 12:00 a.m.

CVE-2023-27846

2023-10-3100:00:00
mitre
github.com
sql injection
prestashop
themevolty
remote attacker
privileges
tvcmsblog
tvcmsvideotab
tvcmswishlist
tvcmsbrandlist
tvcmscategorychainslider
tvcmscategoryproduct
tvcmscategoryslider
tvcmspaymenticon
tvcmstestimonial

AI Score

8.2

Confidence

Low

EPSS

0.001

Percentile

30.8%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog, tvcmsvideotab, tvcmswishlist, tvcmsbrandlist, tvcmscategorychainslider, tvcmscategoryproduct, tvcmscategoryslider, tvcmspaymenticon, tvcmstestimonial components.

AI Score

8.2

Confidence

Low

EPSS

0.001

Percentile

30.8%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-27846