CVE-2024-34994

Summary

In the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via ChannableFeedModuleFrontController::postProcess().

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

CVE Program Container

Additional References

• https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-channable.md

References

• https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-channable.md

• ←Previous
• Next→