Referralbyphone vulnerabilities

1 known vulnerability in Referralbyphone from Snegurka. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Referralbyphone: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-46358Oct 25, 2023Snegurka

  In the module "Referral and Affiliation Program" (referralbyphone) version 3.5.1 and before from Snegurka for PrestaShop, a guest can perform SQL injection. Method `ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate` has sensitive SQL cal