← Back to CVE List

CVE-2024-34988

Published: 2024-06-24T23:15Z
Last Modified: 2024-11-21T09:19Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods `AskforaquotemodulcustomernewquoteModuleFrontController::run()`, `AskforaquotemoduladdproductnewquoteModuleFrontController::run()`, `AskforaquotemodulCouponcodeModuleFrontController::run()`, `AskforaquotemodulgetshippingcostModuleFrontController::run()`, `AskforaquotemodulgetstateModuleFrontController::run().` > MITRE Terms of Use apply – see LICENSE‑MITRE.txt