SnegurkaCVEs & Vulnerabilities

1 CVEs affecting Snegurka products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

referralbyphone 1

CVE-2023-46358CRITICAL

In the module "Referral and Affiliation Program" (referralbyphone) version 3.5.1 and before from Snegurka for PrestaShop, a guest can perform SQL injection. Method `ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.

25 Oct 2023

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database