CVE-2023-25207: SQL Injection
First published: Mon Mar 13 2023(Updated: )
PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Prestashop Dpd France | <6.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this PrestaShop vulnerability?
The vulnerability ID for this PrestaShop vulnerability is CVE-2023-25207.
What is the description of the PrestaShop vulnerability?
The PrestaShop vulnerability is a SQL Injection vulnerability in dpdfrance/ajax.php.
What is the affected software for this vulnerability?
The affected software is PrestaShop dpd_france version up to exclusive 6.1.3.
What is the severity of this vulnerability?
The severity of this vulnerability is critical with a CVSS score of 9.8.
How can I fix this PrestaShop vulnerability?
To fix this vulnerability, upgrade the PrestaShop dpd_france module to version 6.1.3 or above.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/prestashop
- canonical/prestashop dpd france