Sunnytoo vulnerabilities
We track 2 vulnerabilities in Sunnytoo products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 14, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Sunnytoo vulnerabilities
- 9.8 Critical severity
stproductcomments: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method.
- 9.8 Critical severity
Sturls: Improper Neutralization of Special Elements used in an SQL Command
SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.