Security Advisory

CVE-2024-34989

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-06-21 00:00:00
Last updated 2024-08-02 03:07:46
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFProductListModuleFrontController::queryDb().'