CVE-2024-24308

Published: 2024-02-09T08:15Z

Last Modified: 2024-11-21T08:59Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SQL Injection vulnerability in Boostmyshop (boostmyshopagent) module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt