CVE-2023-46914

n/a / n/a PUBLISHED

Description (CNA)

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via ics_export.php.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://security.friendsofpresta.org/modules/2024/02/06/bookingcalendar.html

ADP enrichment

CVE

No English description supplied.

https://security.friendsofpresta.org/modules/2024/02/06/bookingcalendar.html

CISA-ADP

No English description supplied.

No references supplied.