Storecommander vulnerabilities
We track 2 vulnerabilities in Storecommander products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 25, 2023.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Storecommander vulnerabilities
- 9.8 Critical severity
Quickaccounting: Improper Neutralization of Special Elements used in an SQL Command
In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.
- 9.8 Critical severity
Customers Export: Improper Neutralization of Special Elements used in an SQL Command
In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.