Unrated severityNVD Advisory· Published May 25, 2023· Updated Jan 16, 2025

CVE-2023-33278

Description

In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Store Commander/sceexportcustomersdescription
Prestashop/scexportcustomersllm-fuzzy
Range: <=3.6.1

Patches

Vulnerability mechanics

References

friends-of-presta.github.io/security-advisories/modules/2023/05/25/scexportcustomers.htmlmitre
www.storecommander.com/en/addons/480-customer-export-pro.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000